[autobackport: sssd-2-9] nss: validate addrlen in sss_nss_protocol_parse_addr()

[sssd-bot]

This is an automatic backport of PR#9039 nss: validate addrlen in sss_nss_protocol_parse_addr() to branch sssd-2-9, created by @alexey-tikhonov.

Please make sure this backport is correct.

Note

The commits were cherry-picked without conflicts.

You can push changes to this pull request

git remote add sssd-bot git@github.com:sssd-bot/sssd.git
git fetch sssd-bot refs/heads/SSSD-sssd-backport-pr9039-to-sssd-2-9
git checkout SSSD-sssd-backport-pr9039-to-sssd-2-9
git push sssd-bot SSSD-sssd-backport-pr9039-to-sssd-2-9 --force

---

Original commits
2839e8c - nss: validate addrlen in sss_nss_protocol_parse_addr()

Backported commits

• fd45be4 - nss: validate addrlen in sss_nss_protocol_parse_addr()

---

Original Pull Request Body

:fixes: CVE-2026-68742

RHBZ: https://bugzilla.redhat.com/show_bug.cgi?id=2510306

[sumit-bose]

Hi,

backport and original version match, ACK.

bye,
Sumit

[alexey-tikhonov]

FAILED tests/test_failover.py::test_failover__connect_using_ipv4_second_family (ipa) - AssertionError: testuser was not found, SSSD did not switch to IPv4 family!
assert None is not None
FAILED tests/test_authentication.py::test_authentication__user_login[root-ssh] (ldap) - sssd_test_framework.misc.errors.ExpectScriptError: Unexpected end of file
FAILED tests/test_authentication.py::test_authentication__user_login_then_changes_password (ldap) - sssd_test_framework.misc.errors.ExpectScriptError: Unexpected end of file

aren't introduced by this PR and most likely are due to infra.

[sssd-bot]

The pull request was accepted by @alexey-tikhonov with the following PR CI status:

---

🟢 CodeQL (success)
🟢 rpm-build:centos-stream-9-x86_64:upstream (success)
🟢 testing-farm:centos-stream-9-x86_64:upstream (success)
🟢 Build / make-distcheck (success)
🟢 ci / prepare (success)
🔴 ci / system (centos-9) (failure)
🟢 Static code analysis / codeql (success)
🟢 Static code analysis / files-changed (success)
🟢 Static code analysis / pre-commit (success)
➖ Static code analysis / python-system-tests (skipped)

---

There are unsuccessful or unfinished checks. Make sure that the failures are not related to this pull request before merging.