Code review request: 7059542 JNDI name operations should be locale independent
Xuelei Fan
xuelei.fan at oracle.com
Thu Jul 21 07:26:57 UTC 2011
Hi,
In JNDI implementation, String.toUpperCase() and String.toLowerCase() is
used to compare or hashcode case-insensitive strings. These operations
are locale dependent, and may result in unexpected behaviors in some
locale.[1]
This fix is try to interpret case-insensitive string locale
independently in JNDI component.
webrev: http://cr.openjdk.java.net/~xuelei/7059542/webrev.00/
Thanks,
Xuelei
[1]: http://sim.ivi.co/2011/07/trap-of-case-insensitive-string.html
More information about the security-dev
mailing list