[Python-modules-team] Bug#915866: [python3-dnspython] crashes on parsing DNS zone file with NSEC3

[Maximilian Engelhardt]

Package: python3-dnspython
Version: 1.15.0-1
Severity: normal
Tags: patch

Hi,

python3-dnspython crashes while parsing my zone files with DNSSEC and NSEC3. 
The zone files are generated by the knot DNS server and I thus believe them to 
be correct and valid.

Traceback (most recent call last):                                    
  File "/usr/lib/python3/dist-packages/dns/zone.py", line 691, in _rr_line
    self.current_origin, False)                                                             
  File "/usr/lib/python3/dist-packages/dns/rdata.py", line 428, in from_text  
    return cls.from_text(rdclass, rdtype, tok, origin, relativize)        
  File "/usr/lib/python3/dist-packages/dns/rdtypes/ANY/NSEC3.py", line 133, in from_text
    windows.append((window, ''.join(bitmap[0:octets])))                     
TypeError: sequence item 0: expected str instance, int found            


I found the problem has been fixed upstream in [1]. Please add the fix to 
Debian. I can confirm that the patch fixes the crash for me. Looking at the 
latest upstream git commits there also seems to be a new release (1.16.0) with 
this fix included in the pipeline.

I also can create a merge request on salsa for this patch if preferred.

[1] https://github.com/rthalley/dnspython/commit/fed4e0c5371ed513dbc2d4ad477ce1bd1c940114

Thanks,
Maxi
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part.
URL: <http://alioth-lists.debian.net/pipermail/python-modules-team/attachments/20181207/1bf082b8/attachment.sig>