Menu

#52 getaddrinfo() ipv6 hostname resolution bug

open
nobody
None
5
2014-12-21
2004-02-13
No

In the FQDN function in etc.c, getaddrinfo() is used to
resolve a hostname to its FQDN, only the AI_CANONNAME
flag is not set so it getaddrinfo() never fills in the
ai_canonname pointer in the addrinfo struct. The FQDN
is thus not supplied which results in cookie security
violations for web hosts on the local network.

This patch adds the AI_CANONNAME flag to the request.

Discussion

  • Andrew MacPherson

    FQDN() getaddrinfo() patch

     
  • Tatsuya Kinoshita

    Merged in w3m 0.5.1.

     

Log in to post a comment.