Code review request: 7059542 JNDI name operations should be locale independent
Xuelei Fan
xuelei.fan at oracle.com
Mon Jul 25 00:39:23 UTC 2011
Ping ...
Xuelei
On 7/21/2011 3:26 PM, Xuelei Fan wrote:
> Hi,
>
> In JNDI implementation, String.toUpperCase() and String.toLowerCase() is
> used to compare or hashcode case-insensitive strings. These operations
> are locale dependent, and may result in unexpected behaviors in some
> locale.[1]
>
> This fix is try to interpret case-insensitive string locale
> independently in JNDI component.
>
> webrev: http://cr.openjdk.java.net/~xuelei/7059542/webrev.00/
>
> Thanks,
> Xuelei
>
> [1]: http://sim.ivi.co/2011/07/trap-of-case-insensitive-string.html
More information about the security-dev
mailing list