From 69cfe9cc7c03f663bcbc430291bc3a9460e433ba Mon Sep 17 00:00:00 2001 From: Denys Fedoryshchenko Date: Wed, 28 Oct 2026 20:47:22 +0200 Subject: tests: fix DHCPv6 fixtures after DNS refactoring and add CI coverage Use the shared DNS storage and production allocator in the DHCPv6 fixture. Check bounded large DNS replies, preserve the repeated-ORO overflow regression, and check domain-list allocation failure in both reply builders. Link ipv6_dns.c and stub the truncation warning. Run the standalone suites and CTest in sanitizer CI, and replace the stale documented failure with current instructions. Validation: all six standalone suites pass with ASan/UBSan (LCP uses UBSan); both CTest checks pass. Signed-off-by: Denys Fedoryshchenko --- docs/ng40-safeguards-review.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) (limited to 'docs') diff --git a/docs/ng40-safeguards-review.md b/docs/ng40-safeguards-review.md index 8dfbe32e..9ba08977 100644 --- a/docs/ng40-safeguards-review.md +++ b/docs/ng40-safeguards-review.md @@ -107,10 +107,10 @@ git diff --check ``` For current checkouts, see the [focused unit test instructions](../tests/README.md#focused-unit-tests). -The later IPv6 DNS storage refactor removed `conf_dns_count`, which the -DHCPv6 fixture still references, and the runner needs to link `ipv6_dns.c`. -The full command above therefore does not currently compile on master. The -historical results below do not establish that the current full suite passes. +The DHCPv6 fixture now uses the shared IPv6 DNS storage and its production +implementation. It checks safe truncation of oversized DNS replies and +failure propagation when domain-list options exhaust reply space. The +sanitizer workflow also runs the complete standalone safeguard suite. Build, the existing IPv6 DNS selection test, and five standalone suites passed. Tests compile production code with small external-service stubs. DHCPv6, RADIUS, VRF, and pool tests use ASan, -- cgit v1.2.3