Steven Richards dec6603c16 dns/dnsmessage: reject too large of names early during unpack ...

The existing implementation of the Name.unpack method does not check the
length of the domain name until parsing is complete. This allows a
malicious user to supply an unreasonably large name and wastle cycles
parsing. This change moves an equivalent check into the loop during
process to short-circuit if we've created too large of a name.

For golang/go#77540

Change-Id: I4c4bf20c0342825a09cefd9b0b3c0bdce0c80137
Reviewed-on: https://go-review.googlesource.com/c/net/+/750260
Reviewed-by: Roland Shoemaker <roland@golang.org>
Auto-Submit: Roland Shoemaker <roland@golang.org>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Cherry Mui <cherryyz@google.com>

2026-03-06 10:52:24 -08:00

..

example_test.go

dns/dnsmessage: use exported MustNewName in example

2022-08-22 23:08:55 +00:00

message_test.go

dns/dnsmessage: reject too large of names early during unpack

2026-03-06 10:52:24 -08:00

message.go

dns/dnsmessage: reject too large of names early during unpack

2026-03-06 10:52:24 -08:00

svcb_test.go

dns/dnsmessage: return an error for too long SVCParam.Value

2025-10-15 14:03:36 -07:00

svcb.go

dns/dnsmessage: avoid use of "strings" and "math" in dns/dnsmessage

2025-11-24 14:33:11 -08:00