sdproxy/version.go at main · cbuijs/sdproxy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
/*
File:    version.go
Version: 1.514.1
Last Updated: 19-Oct-2026 15:40 CEST
Description:
  Global version, build time, and build number constants for sdproxy.

Changes:
  1.514.1 - [BUG/FIX] Removed stray `true_dummy()` call in `process_upstream.go`.
  1.514.0 - [SECURITY/FIX] Added `syncQuestionCasing` (`cache_rw.go`, `process_upstream.go`)
            to synchronize direct Answer record owner-name casing with the requesting
            client's Question casing (0x20 bit encoding) across cache hits and
            SingleFlight-coalesced responses.
  1.513.0 - [SECURITY/FIX] Guarded `spoofResponseWriter.WriteMsg` (`process_spoof.go`)
            from emitting unrequested `CNAME` records when `w.qtype == dns.TypeRRSIG`
            and an upstream returns CNAME records alongside RRSIGs.
  1.512.0 - [SECURITY/FIX] Stripped target-domain DNSSEC authority proofs (`NSEC`,
            `NSEC3`, `RRSIG`) and `TypeRRSIG` answer records in `spoofResponseWriter.WriteMsg`
            (`process_spoof.go`), and cleared `out.AuthenticatedData = false` in
            `flattenCNAME` (`transform.go`).
  1.511.0 - [SECURITY/FIX] Bypassed `flattenCNAME` (`transform.go`) when DNSSEC (`DO=1`)
            is requested by the client, and dropped rewritten `RRSIG` records + cleared
            `AuthenticatedData` in `spoofResponseWriter.WriteMsg` (`process_spoof.go`).
  1.510.0 - [SECURITY/FIX] Preserved matching `RRSIG` records (`sig.TypeCovered == w.qtype`)
            in `spoofResponseWriter.WriteMsg` (`process_spoof.go`) when `hasTerminal` is
            true, and rewrote the initial CNAME `RRSIG` owner name to `w.originalQname`
            on incomplete CNAME chains.
  1.509.0 - [SECURITY/FIX] Implemented `RRSIG` handling in `spoofResponseWriter.WriteMsg`
            (`process_spoof.go`) for `TypeRRSIG`/`TypeANY` queries and preserved valid
            intermediate CNAME signatures when returning incomplete CNAME chains.
  1.508.0 - [SECURITY/FIX] Hardened `spoofResponseWriter.WriteMsg` (`process_spoof.go`)
            to validate that extracted CNAME and terminal records belong to the
            resolved CNAME chain rooted at `w.cnameTarget` before rewriting their
            owner names to `w.originalQname`.
  1.507.0 - [SECURITY/FIX] Guarded `SetNegativeSOA` in `spoofResponseWriter.WriteMsg`
            (`process_spoof.go`) so it only executes when `len(res.Answer) == 0`.
  1.506.0 - [SECURITY/FIX] Bounded `validNames` growth in `CacheSet` (`cache_rw.go`) to
            64 entries to prevent unbounded slice growth on responses with excessive CNAMEs.
*/

package main

var (
	// BuildVersion represents the current release/build version of sdproxy.
	BuildVersion string = "v1.514.1"

	// BuildTime records the date and time the binary was compiled.
	BuildTime string = "19-Oct-2026 15:40 CEST"

	// BuildNumber is an internal sequential build tracker or CI pipeline number.
	BuildNumber string = "574"
)