tree c9453326423a4c03e8ba8c20c03e205ded852408
parent 724af9c35838492dcaacc1ac51a8a0187c994c54
author Ian Alexander <jitsu@google.com> 1782183939 -0400
committer Mark Freeman <markfreeman@google.com> 1785960938 -0700

secure/precis: fix short destination buffer handling in Nickname profile

The additional mapping rule for the Nickname profile (RFC 8266) requires
collapsing interior sequences of spaces. The Transform implementation
was writing an interior space to the destination buffer without first
checking if there was enough space for both the space and the next rune.

This change ensures that transform.ErrShortDst is returned if the
destination buffer is too small, preventing potential out-of-bounds
writes or incomplete copies.

Thanks to Omkhar Arasaratnam (GitHub: omkhar) for reporting this issue.

Fixes CVE-2026-56851
Fixes golang/go#80112

Change-Id: I51c8dcc58a5b8fd1002f2cdd832698651db89a15
Reviewed-on: https://go-review.googlesource.com/c/text/+/793360
LUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Damien Neil <dneil@google.com>