[krbdev.mit.edu #9174] git commit

"Greg Hudson via RT" <[email protected]> Thu, 22 May 2025 00:01:12 -0400
Newsgroups gmane.comp.encryption.kerberos.bugs
Message-ID <[email protected]>
Thu May 22 00:01:12 2025: Request 9174 was acted upon.
 Transaction: Ticket created by [email protected]
       Queue: krb5
     Subject: git commit
       Owner: [email protected]
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9174 >



Fix crash on empty TXT records

In k5_try_realm_txt_rr(), error out if the first text string in a TXT
record is empty or if its length exceeds the record length.

This function is only used when dns_lookup_realm is set to true in
krb5.conf.  An alternative implementation is used on Windows.

[[email protected]: moved zero-length check and added upper bound check;
rewrote commit message]

https://github.com/krb5/krb5/commit/6a7877183ef668d3b52df1f2926acc8be6f1c475
Author: David Zhou <[email protected]>
Committer: Greg Hudson <[email protected]>
Commit: 6a7877183ef668d3b52df1f2926acc8be6f1c475
Branch: master
 src/lib/krb5/os/dnsglue.c | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)