Ticket History #2684: callers of res_search don't handle large replies

# Fri Aug 27 16:58:30 2004 <nelson@thursby.com> - Ticket created

Date:	Fri, 27 Aug 2004 14:26:18 -0500
From:	Paul Nelson <nelson@thursby.com>
To:	<krb5-bugs@mit.edu>
Subject:	res_search in krb 1.3.x

Download (untitled) / with headers
text/plain 290B

I have a customer that has an Active Directory domain with 200 domain
controllers. When the MIT Kerberos library uses res_search to look up
_kerberos._udp.XXX.COM, the result exceeds the 2048 buffer size. The actual
size is around 9500 bytes.

This code is in src/lib/krb5/os/dnssrv.c

# Tue Sep 21 17:23:37 2004 tlyu (Taylor Yu) - Status changed from 'new' to 'resolved'

# Tue Sep 21 17:23:38 2004 tlyu (Taylor Yu) - Given to tlyu (Taylor Yu)

# Tue Sep 21 17:23:40 2004 tlyu (Taylor Yu) - Correspondence added

Download (untitled) / with headers
text/plain 446B

[nelson@thursby.com - Fri Aug 27 16:58:30 2004]:

Show quoted text

> I have a customer that has an Active Directory domain with 200 domain
> controllers. When the MIT Kerberos library uses res_search to look up
> _kerberos._udp.XXX.COM, the result exceeds the 2048 buffer size. The

actual

Show quoted text

> size is around 9500 bytes.
>
> This code is in src/lib/krb5/os/dnssrv.c

This should be fixed in code checked into the trunk, which implements a
DNS resolver glue layer.

# Tue Sep 21 17:26:19 2004 tlyu (Taylor Yu) - Subject changed from 'res_search in krb 1.3.x' to 'callers of res_search don't handle large replies'

# Tue Sep 21 17:26:21 2004 tlyu (Taylor Yu) - Component krb5-libs added

# Tue Sep 21 17:26:24 2004 tlyu (Taylor Yu) - Version_reported 1.3 added

# Tue Sep 21 17:26:26 2004 tlyu (Taylor Yu) - Ticket 2684 RefersTo ticket 2710.

# Tue Sep 21 17:29:04 2004 <nelson@thursby.com> - Comments added

Date:	Tue, 21 Sep 2004 16:28:54 -0500
Subject:	Re: [krbdev.mit.edu #2684] res_search in krb 1.3.x
From:	Paul Nelson <nelson@thursby.com>
To:	<rt-comment@krbdev.mit.edu>
RT-Send-Cc:

Download (untitled) / with headers
text/plain 729B

Thanks.

Show quoted text

> From: Tom Yu via RT <rt-comment@krbdev.mit.edu>
> Reply-To: <rt-comment@krbdev.mit.edu>
> Date: Tue, 21 Sep 2004 17:23:45 -0400 (EDT)
> To: <nelson@thursby.com>
> Cc: <krb5-prs@mit.edu>
> Subject: [krbdev.mit.edu #2684] res_search in krb 1.3.x
>
> [nelson@thursby.com - Fri Aug 27 16:58:30 2004]:
>

>> I have a customer that has an Active Directory domain with 200 domain
>> controllers. When the MIT Kerberos library uses res_search to look up
>> _kerberos._udp.XXX.COM, the result exceeds the 2048 buffer size. The

> actual

>> size is around 9500 bytes.
>>
>> This code is in src/lib/krb5/os/dnssrv.c

>
> This should be fixed in code checked into the trunk, which implements a
> DNS resolver glue layer.
>

# Mon Nov 15 22:22:19 2004 tlyu (Taylor Yu) - Version_Fixed 1.4 added