Uploaded image for project: 'XML-RPC'
  1. XML-RPC
  2. XMLRPC-145

Paranoid mode of class Webserver doesn't work any more since v3.0

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 3.0a1, 3.0b1, 3.0rc1, 3.0, 3.1
    • Fix Version/s: 3.1
    • Component/s: Source
    • Labels:
      None
    • Environment:
      Using Java 1.5 and XMLRPC v3.0 and above

      Description

      If you activate the paranoid mode of class WebServer since version 3.0, it rejects all connections because of the following bug in constructor of private class AddressMatcher:
      line ~89 of head revision of class WebServer:
      pattern[i] = Integer.parseInt(next);
      should be rolled back to:
      pattern[i] = (byte) Integer.parseInt(next);
      as in version 2.0
      Without the casting, the IP pattern is not correctly recorded and therefore all supposed accepted IPs are denied...

      It's a major bug of v3.0 to me.

        Attachments

          Activity

            People

            • Assignee:
              jochen@apache.org Jochen Wiedmann
              Reporter:
              gamov Gamaliel Amaudruz

              Dates

              • Created:
                Updated:
                Resolved:

                Issue deployment