Hacker News Reader

Why would that matter? This was a bug in a POSIX function that all C libraries would be required to implement.

And the C libraries all implement those functions (mostly) differently. The "lighter weight" standard libraries tend to have simpler implementations of these functions, which may be easier to audit for these kinds of bugs.

For example:

https://sourceware.org/git/?p=glibc.git;a=blob;f=sysdeps/pos...

compare with

http://git.musl-libc.org/cgit/musl/tree/src/network/getaddri...

Your musl libc list is too short. GNU libc puts much of getaddrinfo() into one source file. musl libc splits it across several, including:

* http://git.musl-libc.org/cgit/musl/tree/src/network/getaddri...

* http://git.musl-libc.org/cgit/musl/tree/src/network/lookup_s...

* http://git.musl-libc.org/cgit/musl/tree/src/network/lookup_n...

* http://git.musl-libc.org/cgit/musl/tree/src/network/lookup_i...

* http://git.musl-libc.org/cgit/musl/tree/src/network/resolvco...

See also the BSD libc implementation of getaddrinfo():

* https://svnweb.freebsd.org/base/stable/10/lib/libc/net/getad...

* http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/net/getaddr...

Reply on news.ycombinator.com