net: allow invalid TransportSecurityState to process invalid DNS names.

net/http/transport_security_state.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/http/transport_security_state.h"
 
 #if defined(USE_OPENSSL)
 #include <openssl/ecdsa.h>
 #include <openssl/ssl.h>
 #else  // !defined(USE_OPENSSL)
@@ skipping 226 matching lines @@
     // name is >255 bytes. However, search terms can have those properties.
     return std::string();
   }
 
   for (size_t i = 0; new_host[i]; i += new_host[i] + 1) {
     const unsigned label_length = static_cast<unsigned>(new_host[i]);
     if (!label_length)
       break;
 
     for (size_t j = 0; j < label_length; ++j) {
-      // RFC 3490, 4.1, step 3
-      if (!IsSTD3ASCIIValidCharacter(new_host[i + 1 + j]))
-        return std::string();
-
       new_host[i + 1 + j] = tolower(new_host[i + 1 + j]);
     }
-
-    // step 3(b)
-    if (new_host[i + 1] == '-' ||
-        new_host[i + label_length] == '-') {
-      return std::string();
-    }
   }
 
   return new_host;
 }
 
 // |ReportUMAOnPinFailure| uses these to report which domain was associated
 // with the public key pinning failure.
 //
 // DO NOT CHANGE THE ORDERING OF THESE NAMES OR REMOVE ANY OF THEM. Add new
 // domains at the END of the listing (but before DOMAIN_NUM_EVENTS).
@@ skipping 617 matching lines @@
   return true;
 }
 
 bool TransportSecurityState::DomainState::HasPublicKeyPins() const {
   return static_spki_hashes.size() > 0 ||
          bad_static_spki_hashes.size() > 0 ||
          dynamic_spki_hashes.size() > 0;
 }
 
 }  // namespace