Re: Possible bad punycode slipping through

[Bob Aman]

Oh that is good to know. Appreciate the clarification.

On Thu, Dec 10, 2015, 6:51 AM Simon Josefsson <address@hidden> wrote:

Bob Aman <address@hidden> writes:

> I believe this is an invalid punycode encoding and should be raising an
> error. Instead, I'm seeing the identity value without an error when trying
> to convert to unicode.
>
> http://xn--zckp1cyg1.sblo.jp/
>
> I believe it's that last character in the sequence that's invalid.
>
> This is in 1.32 on OS X, installed via homebrew.

ToUnicode never raises errors.  On internal failures, the original
string is returned.  RFC 3490:

   ToUnicode never fails.  If any step fails, then the original input
   sequence is returned immediately in that step.

/Simon