[PATCH v2] resolv: Check hostname for validity (CVE-2026-4438)

[Andreas Schwab]

On Mär 26 2026, Carlos O'Donell wrote:

> The processed hostname in getanswer_ptr should be correctly checked to
> avoid invalid characters from being allowed, including shell
> metacharacters. It is a security issue to fail to check the returned
> hostname for validity.

Should gaih_getanswer_slice have that check as well?

-- 
Andreas Schwab, SUSE Labs, schwab@suse.de
GPG Key fingerprint = 0196 BAD8 1CE9 1970 F4BE  1748 E4D4 88E3 0EEA B9D7
"And now for something completely different."