XML-RPC

Paranoid mode of class Webserver doesn't work any more since v3.0

Created: 01/Aug/07 12:15 PM   Updated: 28/Nov/08 08:53 PM
Return to search
Component/s: Source
Affects Version/s: 3.0a1, 3.0b1, 3.0rc1, 3.0, 3.1
Fix Version/s: 3.1

Time Tracking:
Not Specified

Environment: Using Java 1.5 and XMLRPC v3.0 and above

Resolution Date: 01/Aug/07 08:54 PM


 Description  « Hide
If you activate the paranoid mode of class WebServer since version 3.0, it rejects all connections because of the following bug in constructor of private class AddressMatcher:
line ~89 of head revision of class WebServer:
pattern[i] = Integer.parseInt(next);
should be rolled back to:
pattern[i] = (byte) Integer.parseInt(next);
as in version 2.0
Without the casting, the IP pattern is not correctly recorded and therefore all supposed accepted IPs are denied...

It's a major bug of v3.0 to me.

 All   Comments   Work Log   Change History   Subversion Commits      Sort Order: Ascending order - Click to sort in descending order
Jochen Wiedmann added a comment - 01/Aug/07 08:54 PM
Applied to the trunk. Thank you!

Gamaliel Amaudruz added a comment - 02/Aug/07 01:47 AM
You're must welcome! Happy to help this great project.

Jochen Wiedmann added a comment - 28/Nov/08 08:53 PM
Closing issues which have been released.