[SLING-2211] Potential infinite loop in the :copy operation of the POST servlet

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: Servlets Post 2.0.2, Servlets Post 2.0.4, Servlets Post 2.1.0
• Component/s: Servlets
• Assignee: Bertrand Delacretaz
• Reporter: Jukka Zitting
• Created: 08/Sep/11 13:20
• Updated: 04/Mar/13 10:46
• Resolved: 04/Mar/13 10:46

Description

The following puts Sling into a loop that will only end when an OutOfMemoryError is caused by a too large transient space:

$ curl -u admin:admin -F x=y http://localhost:8080/foo
$ curl -u admin:admin -F :operation=copy -F :dest=/foo/bar http://localhost:8080/foo

The solution would be to either fail early with such recursive copies or to use the JCR Workspace.copy() operation or a similar mechanism that copies only previously persisted content, so that the recursion within the transient space is avoided.

Issue Links

• duplicates: SLING-2517 Add validity checks to CopyFrom POST operation paths