Details
Description
Connect parameters are validated in every transport factory with a statement like this:
if (!options.isEmpty()) { throw new IllegalArgumentException("Invalid connect parameters: " + options); }
Socket parameters (i.e. connect parameters prefixed with socket.) are however never validated.
They are put away at
TcpTransportFactory.compositeConfigure(Transport, WireFormat, Map) line: 85
and then set at
TcpTransport.initialiseSocket(Socket) line: 428
where there is no check that socketOptions is empty after the call.
I've attached a patch (#1) that rectifies this.
Bonus: I found similar issues in the transport classes. See patch #2 and #3.
Attachments
Attachments
Issue Links
- is related to
-
AMQ-4582 Specifying invalid ciphersuite in SSL transport causes all available ciphersuites to be enabled
- Resolved