test(ios): cover IPv4-mapped IPv6 loopback in manual TLS policy#22045

Merged

mbelinky merged 2 commits intomainfrom

test/ios-mapped-ipv6-loopback-coverage

Feb 20, 2026

Contributor

mbelinky commented Feb 20, 2026 •

edited by greptile-apps bot

Loading

Summary

add regression coverage for ::ffff:127.0.0.1 in manual host TLS resolution tests
confirms IPv4-mapped IPv6 loopback is treated as loopback (no forced TLS)

Why

Greptile correctly pointed out this specific test gap after the loopback hardening changes.

Changes

apps/ios/Tests/GatewayConnectionSecurityTests.swift
- add:
  - #expect(controller._test_resolveManualUseTLS(host: "::ffff:127.0.0.1", useTLS: false) == false)

Verification

attempted targeted test run:
- xcodebuild -project apps/ios/OpenClaw.xcodeproj -scheme OpenClaw -destination 'platform=iOS Simulator,name=iPhone 17' test -only-testing:OpenClawTests/GatewayConnectionSecurityTests/manualConnectionsForceTLSForNonLoopbackHosts
- blocked in this environment because the scheme requires watchOS runtime (watchOS 26.2 must be installed).

Greptile Summary

Added regression test for IPv4-mapped IPv6 loopback address (::ffff:127.0.0.1) to verify it's correctly treated as loopback and doesn't force TLS in manual gateway connections.

Test coverage fills gap identified after loopback hardening changes in fix(ios): force tls for non-loopback manual gateway hosts #21969
Implementation in isLoopbackIPv6 (lines 695-707) already handles IPv4-mapped addresses by checking bytes[10-11] for 0xFF and bytes[12] for 127
New test assertion verifies expected behavior is working correctly

Confidence Score: 5/5

This PR is safe to merge with minimal risk
Single test assertion added to existing test suite with no production code changes. The test verifies that IPv4-mapped IPv6 loopback addresses are correctly handled by existing implementation (confirmed by code review of isLoopbackIPv6 at lines 704-705), filling a gap in test coverage.
No files require special attention

_{Last reviewed commit: 822d26e}


          iOS: add mapped IPv6 loopback TLS test

822d26e

openclaw-barnacle bot added app: ios size: XS maintainer labels


          test: #22045 thanks @mbelinky

ec952f0

mbelinky merged commit fe32150 into main

14 checks passed

mbelinky deleted the test/ios-mapped-ipv6-loopback-coverage branch

February 20, 2026 17:23

Contributor Author

mbelinky commented Feb 20, 2026

Merged via squash.

Prepared head SHA: ec952f0
Merge commit: fe32150

Thanks @mbelinky!

github-actions bot mentioned this pull request

📡 Upstream Digest — 2026-02-20 18:35 UTC curtismercier/openclaw-mods#78

Open

rodrigogs pushed a commit to rodrigogs/openclaw that referenced this pull request


          test(ios): cover IPv4-mapped IPv6 loopback in manual TLS policy (open…

0ccdc25

…claw#22045)

Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: ec952f0
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky

Hansen1018 added a commit to Hansen1018/openclaw that referenced this pull request


          test(ios): cover IPv4-mapped IPv6 loopback in manual TLS policy (open…

69d6b1a

…claw#22045)

Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: ec952f0
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky

vincentkoc pushed a commit that referenced this pull request


          test(ios): cover IPv4-mapped IPv6 loopback in manual TLS policy (#22045)

d1cd596

Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: ec952f0
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky

dgarson pushed a commit to dgarson/clawdbot that referenced this pull request


          test(ios): cover IPv4-mapped IPv6 loopback in manual TLS policy (open…

54bb993

…claw#22045)

Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: ec952f0
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky

mmyyfirstb pushed a commit to mmyyfirstb/openclaw that referenced this pull request


          test(ios): cover IPv4-mapped IPv6 loopback in manual TLS policy (open…

8b8499d

…claw#22045)

Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: ec952f0
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky

obviyus pushed a commit to guirguispierre/openclaw that referenced this pull request


          test(ios): cover IPv4-mapped IPv6 loopback in manual TLS policy (open…

4f264bd

…claw#22045)

Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: ec952f0
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky

mreedr pushed a commit to mreedr/openclaw-custom that referenced this pull request


          test(ios): cover IPv4-mapped IPv6 loopback in manual TLS policy (open…

d8a62cc

…claw#22045)

Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: ec952f0
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky

github-actions bot mentioned this pull request

cherry-pick: upstream docs commits (2026-03-01-0443) hughdidit/DAISy-Agency#141

Closed

6 tasks

hughdidit pushed a commit to hughdidit/DAISy-Agency that referenced this pull request


          test(ios): cover IPv4-mapped IPv6 loopback in manual TLS policy (open…

c678f31

…claw#22045)

Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: ec952f0
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky

(cherry picked from commit fe32150)

# Conflicts:
#	CHANGELOG.md

hughdidit pushed a commit to hughdidit/DAISy-Agency that referenced this pull request


          test(ios): cover IPv4-mapped IPv6 loopback in manual TLS policy (open…

2862eb7

…claw#22045)

Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: ec952f0
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky

(cherry picked from commit fe32150)

# Conflicts:
#	CHANGELOG.md

zooqueen pushed a commit to hanzoai/bot that referenced this pull request


          test(ios): cover IPv4-mapped IPv6 loopback in manual TLS policy (open…

914cc3b

…claw#22045)

Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: ec952f0
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

app: ios maintainer size: XS