Code review request, 8020842 IDN do not throw IAE when hostname ends with a trailing dot
Weijun Wang
weijun.wang at oracle.com
Fri Aug 9 01:22:53 UTC 2013
I tried nslookup. Those with ".." inside are illegal,
$ nslookup com..
nslookup: 'com..' is not a legal name (empty label)
but
$ nslookup .
Server: 192.168.10.1
Address: 192.168.10.1#53
Non-authoritative answer:
*** Can't find .: No answer
Also, since this bug was originally about SNIHostName, do you need to
add some extra restriction there to reject "oracle.com." things?
Thanks
Max
On 8/9/13 8:41 AM, Xuelei Fan wrote:
> Ping.
>
> Thanks,
> Xuelei
>
> On 8/7/2013 11:17 PM, Xuelei Fan wrote:
>> Please review the new update:
>>
>> http://cr.openjdk.java.net./~xuelei/8020842/webrev.01/
>>
>> With this update, "com." is valid (return "com."); "." and
>> "example..com" are invalid. And IAE will be thrown for invalid IDN.
>>
>> Thanks,
>> Xuelei
>>
More information about the security-dev
mailing list