Bug 19687 - libresolv must not use strcasecmp for domain name matching
Summary: libresolv must not use strcasecmp for domain name matching
Status: ASSIGNED
Alias: None
Product: glibc
Classification: Unclassified
Component: network (show other bugs)
Version: 2.24
: P2 normal
Target Milestone: ---
Assignee: Florian Weimer
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-02-20 12:54 UTC by Florian Weimer
Modified: 2016-09-15 15:20 UTC (History)
0 users

See Also:
Host:
Target:
Build:
Last reconfirmed:
fweimer: security-

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Florian Weimer 2016-02-20 12:54:41 UTC 
Domain names are specified as case-insensitive in the ASCII letter range (A-Z is equivalent to a-z).  strcasecmp uses the current locale and can therefore produce incorrect results.