[net] dns/dnsmessage: avoid panic when parsing SVCB record with truncated data

0 views

Skip to first unread message

Gopher Robot (Gerrit)

unread,

Jun 5, 2026, 2:05:32 PM (2 days ago) Jun 5

to Damien Neil, goph...@pubsubhelper.golang.org, golang-...@googlegroups.com, Nicholas Husin, Nicholas Husin, golang...@luci-project-accounts.iam.gserviceaccount.com, golang-co...@googlegroups.com

Gopher Robot submitted the change

Change information

Commit message:

dns/dnsmessage: avoid panic when parsing SVCB record with truncated data

Thanks to Mundur (https://github.com/M0nd0R) for reporting this issue.

Fixes golang/go#79795
Fixes CVE-2026-46600

Change-Id: Ie32a9dae6789eb98c816bc7508feba686a6a6964

Reviewed-on: https://go-review.googlesource.com/c/net/+/786345

LUCI-TryBot-Result: golang...@luci-project-accounts.iam.gserviceaccount.com <golang...@luci-project-accounts.iam.gserviceaccount.com>

Auto-Submit: Damien Neil <dn...@google.com>

Reviewed-by: Nicholas Husin <hu...@google.com>

Reviewed-by: Nicholas Husin <n...@golang.org>

Files:

M dns/dnsmessage/message_test.go
M dns/dnsmessage/svcb.go

Change size: M

Delta: 2 files changed, 50 insertions(+), 11 deletions(-)

Branch: refs/heads/master

Submit Requirements:

Code-Review: +1 by Nicholas Husin, +2 by Nicholas Husin
TryBots-Pass: LUCI-TryBot-Result+1 by golang...@luci-project-accounts.iam.gserviceaccount.com

Open in Gerrit

Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings.

Gerrit

open

diffy

satisfied_requirement

Reply all

Reply to author

Forward

0 new messages