From: Vladimír Čunát <vladimir.cunat@nic.cz>
Date: Fri, 24 Jul 2026 09:07:22 +0000 (+0200)
Subject: daemon/quic nit: explicitly assert !AF_UNIX
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=fbe172ec7f2f5bba4162e680f147a17d47e00a2a;p=thirdparty%2Fknot-resolver.git

daemon/quic nit: explicitly assert !AF_UNIX

scan.coverity.com noticed this with ID 643169
---

diff --git a/daemon/quic_common.c b/daemon/quic_common.c
index 8588506b1..35bdcbb52 100644
--- a/daemon/quic_common.c
+++ b/daemon/quic_common.c
@@ -334,6 +334,8 @@ int write_retry_packet(struct wire_buf *dest, kr_quic_table_t *table,
 	uint8_t retry_token[NGTCP2_CRYPTO_MAX_RETRY_TOKENLEN2];
 	uint64_t now = quic_timestamp();
 
+	if (kr_fails_assert(src_addr->sa_family != AF_UNIX))
+		return -1;  // too long addr; silence analyzers
 	int ret = ngtcp2_crypto_generate_retry_token2(
 		retry_token, (const uint8_t *)table->hash_secret,
 		sizeof(table->hash_secret), dec_cids->version,