From 8fd2c99f1535901897da536264f3451a02246210 Mon Sep 17 00:00:00 2001
From: David Cermak <cermak@espressif.com>
Date: Tue, 18 Mar 2025 17:03:19 +0100
Subject: [PATCH 1/2] fix(mdns): Fix parsing incorrect txt records

Issue discovered when fuzzing packet parser,
received packet with inconsistent txt section caused issues on final cleanup
---
 components/mdns/mdns.c | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/components/mdns/mdns.c b/components/mdns/mdns.c
index 388fc9599..20ee5eead 100644
--- a/components/mdns/mdns.c
+++ b/components/mdns/mdns.c
@@ -3593,7 +3593,7 @@ static void _mdns_result_txt_create(const uint8_t *data, size_t len, mdns_txt_it
         }
 
         int name_len = _mdns_txt_item_name_get_len(data + i, partLen);
-        if (name_len < 0) {//invalid item (no name)
+        if (name_len < 0 || txt_num >= num_items) {//invalid item (no name or more items than expected)
             i += partLen;
             continue;
         }
@@ -3602,7 +3602,6 @@ static void _mdns_result_txt_create(const uint8_t *data, size_t len, mdns_txt_it
             HOOK_MALLOC_FAILED;
             goto handle_error;//error
         }
-
         mdns_txt_item_t *t = &txt[txt_num];
         uint8_t *value_len = &txt_value_len[txt_num];
         txt_num++;
@@ -3624,6 +3623,8 @@ static void _mdns_result_txt_create(const uint8_t *data, size_t len, mdns_txt_it
             *value_len = new_value_len;
             i += new_value_len;
             t->value = value;
+        } else {
+            t->value = NULL;
         }
     }
 

From 61da30b0134a2eb3594ac442832b57302bb61375 Mon Sep 17 00:00:00 2001
From: David Cermak <cermak@espressif.com>
Date: Fri, 21 Mar 2025 12:40:42 +0100
Subject: [PATCH 2/2] bump(mdns): 1.8.1 -> 1.8.2

1.8.2
Bug Fixes
- Fix parsing incorrect txt records (8fd2c99f)
---
 components/mdns/.cz.yaml          | 2 +-
 components/mdns/CHANGELOG.md      | 6 ++++++
 components/mdns/idf_component.yml | 2 +-
 3 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/components/mdns/.cz.yaml b/components/mdns/.cz.yaml
index 986de8a08..2b6a74492 100644
--- a/components/mdns/.cz.yaml
+++ b/components/mdns/.cz.yaml
@@ -3,6 +3,6 @@ commitizen:
   bump_message: 'bump(mdns): $current_version -> $new_version'
   pre_bump_hooks: python ../../ci/changelog.py mdns
   tag_format: mdns-v$version
-  version: 1.8.1
+  version: 1.8.2
   version_files:
   - idf_component.yml
diff --git a/components/mdns/CHANGELOG.md b/components/mdns/CHANGELOG.md
index 4c3f5d390..75a81db10 100644
--- a/components/mdns/CHANGELOG.md
+++ b/components/mdns/CHANGELOG.md
@@ -1,5 +1,11 @@
 # Changelog
 
+## [1.8.2](https://github.com/espressif/esp-protocols/commits/mdns-v1.8.2)
+
+### Bug Fixes
+
+- Fix parsing incorrect txt records ([8fd2c99f](https://github.com/espressif/esp-protocols/commit/8fd2c99f))
+
 ## [1.8.1](https://github.com/espressif/esp-protocols/commits/mdns-v1.8.1)
 
 ### Bug Fixes
diff --git a/components/mdns/idf_component.yml b/components/mdns/idf_component.yml
index 595f91c3b..d331c24f5 100644
--- a/components/mdns/idf_component.yml
+++ b/components/mdns/idf_component.yml
@@ -1,4 +1,4 @@
-version: "1.8.1"
+version: "1.8.2"
 description: "Multicast UDP service used to provide local network service and host discovery."
 url: "https://github.com/espressif/esp-protocols/tree/master/components/mdns"
 issues: "https://github.com/espressif/esp-protocols/issues"