XML-RPC
  1. XML-RPC
  2. XMLRPC-145

Paranoid mode of class Webserver doesn't work any more since v3.0

    Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: 3.0a1, 3.0b1, 3.0rc1, 3.0, 3.1
    • Fix Version/s: 3.1
    • Component/s: Source
    • Labels:
      None
    • Environment:
      Using Java 1.5 and XMLRPC v3.0 and above

      Description

      If you activate the paranoid mode of class WebServer since version 3.0, it rejects all connections because of the following bug in constructor of private class AddressMatcher:
      line ~89 of head revision of class WebServer:
      pattern[i] = Integer.parseInt(next);
      should be rolled back to:
      pattern[i] = (byte) Integer.parseInt(next);
      as in version 2.0
      Without the casting, the IP pattern is not correctly recorded and therefore all supposed accepted IPs are denied...

      It's a major bug of v3.0 to me.

        Activity

        Hide
        Jochen Wiedmann added a comment -

        Applied to the trunk. Thank you!

        Show
        Jochen Wiedmann added a comment - Applied to the trunk. Thank you!
        Hide
        Gamaliel Amaudruz added a comment -

        You're must welcome! Happy to help this great project.

        Show
        Gamaliel Amaudruz added a comment - You're must welcome! Happy to help this great project.
        Hide
        Jochen Wiedmann added a comment -

        Closing issues which have been released.

        Show
        Jochen Wiedmann added a comment - Closing issues which have been released.

          People

          • Assignee:
            Jochen Wiedmann
            Reporter:
            Gamaliel Amaudruz
          • Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development