Code review request, 8020842 IDN do not throw IAE when hostname ends with a trailing dot

Florian Weimer fweimer at redhat.com
Tue Aug 13 08:25:41 UTC 2013


On 08/07/2013 04:05 PM, Michael McMahon wrote:
> Resolvers seem to accept queries using trailing dots.
>
> eg nslookup www.oracle.com.
>
> or InetAddress.getByName("www.oracle.com.");

The trailing dot is even required in some contexts because it bypasses 
the configured search path.  For example, on some systems, "to" and 
"to." return different address records, and for some applications, the 
difference is rather important.

(This applies only to non-Windows systems, Windows has its own 
idiosyncrasies when it comes to the trailing dot.)

-- 
Florian Weimer / Red Hat Product Security Team



More information about the security-dev mailing list