[ODE-590] Deployment Web Service generates ClassCastException in the presence of carriage return on SOAPBody

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.2
• Fix Version/s: 1.3.2
• Component/s: Deployment
• Assignee: Unassigned
• Reporter: Buddhika Chamith De Alwis
• Created: 21/Apr/09 04:12
• Updated: 24/Apr/09 00:54
• Resolved: 22/Apr/09 17:43

Description

In DeploymentWebService following line is used to get the package element of the SOAPBody.

OMElement zipPart = (OMElement) namePart.getNextOMSibling();

This code is vulnerable if a carriage return is present after the <name> tag before <package> tag in the SOAPBody. This happens because of the behaviour of Axiom. Axiom creates an OMText node for the carriage return. So when getNextOMSibling() is called instead of <package> element OMText is selected. But since the OMText cannot be cast to OMElement a ClassCastException occurs. This can be avoided by obtaining zipart OMElement with a call to getChild() or any related method which returns an OMElement reference.