Uploaded image for project: 'Felix'
  1. Felix
  2. FELIX-3229

ConfigurationAdmin.getConfiguration(String, String) and .createConfiguration(String) to generous

    XMLWordPrintableJSON

Details

    Description

      Similar to FELIX-3228, the ConfigurationAdmin.getConfiguration and createConfiguration methods with the location parameter do not properly check the null location properly.

      R 4.3 Configuration Admin (v1.4) spec states:

      • createFactoryConfiguration(String,String)
      • ConfigurationPermission[location,CONFIGURE] - if location is not null
      • ConfigurationPermission["*",CONFIGURE] - if location is null
      • getConfiguration(String,String)
      • ConfigurationPermission[*,CONFIGURE] - if location is null or if the returned configuration c already exists and c.location is null
      • ConfigurationPermission[location,CONFIGURE] - if location is not null
      • ConfigurationPermission[c.location,CONFIGURE] - if the returned configuration c already exists and c.location is not null

      Particularly the CP("*", CONFIGURE) case is not properly checked.

      Attachments

        Activity

          People

            fmeschbe Felix Meschberger
            fmeschbe Felix Meschberger
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: