From rt-comment at krbdev.mit.edu  Thu May 22 00:01:12 2025
From: rt-comment at krbdev.mit.edu (Greg Hudson via RT)
Date: Thu, 22 May 2025 00:01:12 -0400
Subject: [krbdev.mit.edu #9174] git commit
References: <RT-Ticket-9174@mit.edu>
Message-ID: <rt-4.4.3-2-2367945-1747886472-1678.9174-4-0@mit.edu>


Thu May 22 00:01:12 2025: Request 9174 was acted upon.
 Transaction: Ticket created by ghudson at mit.edu
       Queue: krb5
     Subject: git commit
       Owner: ghudson at mit.edu
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9174 >



Fix crash on empty TXT records

In k5_try_realm_txt_rr(), error out if the first text string in a TXT
record is empty or if its length exceeds the record length.

This function is only used when dns_lookup_realm is set to true in
krb5.conf.  An alternative implementation is used on Windows.

[ghudson at mit.edu: moved zero-length check and added upper bound check;
rewrote commit message]

https://github.com/krb5/krb5/commit/6a7877183ef668d3b52df1f2926acc8be6f1c475
Author: David Zhou <david.zhou at dell.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 6a7877183ef668d3b52df1f2926acc8be6f1c475
Branch: master
 src/lib/krb5/os/dnsglue.c | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)