[tor-bugs] #25055 [Core Tor/Tor]: string_is_valid_hostname() returns true for IPv4 addresses

Tor Bug Tracker & Wiki blackhole at torproject.org
Sun Feb 18 19:56:27 UTC 2018


#25055: string_is_valid_hostname() returns true for IPv4 addresses
-------------------------------+------------------------------------
 Reporter:  teor               |          Owner:  (none)
     Type:  defect             |         Status:  needs_revision
 Priority:  Medium             |      Milestone:  Tor: 0.3.4.x-final
Component:  Core Tor/Tor       |        Version:
 Severity:  Normal             |     Resolution:
 Keywords:  IPv6 IPv4 tor-dns  |  Actual Points:
Parent ID:                     |         Points:  1
 Reviewer:                     |        Sponsor:
-------------------------------+------------------------------------

Comment (by teor):

 Replying to [comment:14 rl1987]:
 > What am I missing? What are the action points to get this finished?

 Replying to [comment:12 teor]:
 > let's not break as soon as IETF slightly changes the IDN or other DNS
 formats, please.

 Please make the hostname validation check for alphanumeric, hyphen, and
 underscore in every component.
 Do not check for the precise punycode format as of 2018, that's fragile,
 and will break if the IDN format is changed, or a new DNS format is added.

 If you wish, you can exclude IPv4 addresses, which would otherwise match
 the new hostname check.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25055#comment:15>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list