This is a minor security issue in nss_dns, triggered by a very long name passed to getnetbyname. The defensive copy is not needed because the name may not alias the output buffer. Florian