[krbdev.mit.edu #9174] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Thu May 22 00:01:12 EDT 2025


Thu May 22 00:01:12 2025: Request 9174 was acted upon.
 Transaction: Ticket created by ghudson at mit.edu
       Queue: krb5
     Subject: git commit
       Owner: ghudson at mit.edu
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9174 >



Fix crash on empty TXT records

In k5_try_realm_txt_rr(), error out if the first text string in a TXT
record is empty or if its length exceeds the record length.

This function is only used when dns_lookup_realm is set to true in
krb5.conf.  An alternative implementation is used on Windows.

[ghudson at mit.edu: moved zero-length check and added upper bound check;
rewrote commit message]

https://github.com/krb5/krb5/commit/6a7877183ef668d3b52df1f2926acc8be6f1c475
Author: David Zhou <david.zhou at dell.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 6a7877183ef668d3b52df1f2926acc8be6f1c475
Branch: master
 src/lib/krb5/os/dnsglue.c | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)



More information about the krb5-bugs mailing list