oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

krb5_sock_to_principal: Respect option [libdefaults] block_dns.

Browse Source 
This fixes the one leaky part of:
https://github.com/heimdal/heimdal/issues/1214
This commit is contained in:
Taylor R Campbell
2024-01-10 01:23:56 +00:00
committed by Nico Williams
parent f051c36471
commit e0aeef2bd3
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
lib/krb5/sock_principal.c
View File

@@ -46,6 +46,14 @@ krb5_sock_to_principal (krb5_context context,
socklen_t salen = sizeof(__ss); socklen_t salen = sizeof(__ss);
char hostname[NI_MAXHOST]; char hostname[NI_MAXHOST];
if (krb5_config_get_bool(context, NULL, "libdefaults", "block_dns",
NULL)) {
ret = HEIM_EAI_FAIL;
krb5_set_error_message (context, ret,
"krb5_sock_to_principal: block_dns enabled");
return ret;
}
if (getsockname (sock, sa, &salen) < 0) { if (getsockname (sock, sa, &salen) < 0) {
ret = errno; ret = errno;
krb5_set_error_message (context, ret, "getsockname: %s", strerror(ret)); krb5_set_error_message (context, ret, "getsockname: %s", strerror(ret));