two (bugs? misfeatures?) in libidn

[Jon Nelson]

I've encountered two bugs or misfeatures in libidn:

1. given an idna-encoded input, it is possible to generate invalid
UTF-8 output (as defined by RFC3629). The UTF-8 is invalid because
codepoints above 0x10FFFF are used.

See http://tools.ietf.org/html/rfc3629

2. after decoding some idna-encoded input, it is possible to have
UTF-8 that cannot be re-idna-encoded, usually with a label that is too
long.

What, if anything, should be done here?

-- 
Jon
Software Blacksmith