XML-RPC
  1. XML-RPC
  2. XMLRPC-145

Paranoid mode of class Webserver doesn't work any more since v3.0

    Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: 3.0a1, 3.0b1, 3.0rc1, 3.0, 3.1
    • Fix Version/s: 3.1
    • Component/s: Source
    • Labels:
      None
    • Environment:
      Using Java 1.5 and XMLRPC v3.0 and above

      Description

      If you activate the paranoid mode of class WebServer since version 3.0, it rejects all connections because of the following bug in constructor of private class AddressMatcher:
      line ~89 of head revision of class WebServer:
      pattern[i] = Integer.parseInt(next);
      should be rolled back to:
      pattern[i] = (byte) Integer.parseInt(next);
      as in version 2.0
      Without the casting, the IP pattern is not correctly recorded and therefore all supposed accepted IPs are denied...

      It's a major bug of v3.0 to me.

        Activity

        Gamaliel Amaudruz created issue -
        Gamaliel Amaudruz made changes -
        Field Original Value New Value
        Environment Using Java 1.5 and XMLRPC-3.0 Using Java 1.5 and XMLRPC-3.0 and above
        Jochen Wiedmann made changes -
        Assignee Jochen Wiedmann [ jochen@apache.org ]
        Resolution Fixed [ 1 ]
        Status Open [ 1 ] Resolved [ 5 ]
        Fix Version/s 3.1 [ 12312048 ]
        Gamaliel Amaudruz made changes -
        Environment Using Java 1.5 and XMLRPC-3.0 and above Using Java 1.5 and XMLRPC v3.0 and above
        Component/s Releases [ 11680 ]
        Jochen Wiedmann made changes -
        Status Resolved [ 5 ] Closed [ 6 ]
        Mark Thomas made changes -
        Workflow jira [ 12409775 ] Default workflow, editable Closed status [ 12565434 ]
        Mark Thomas made changes -
        Workflow Default workflow, editable Closed status [ 12565434 ] jira [ 12599124 ]

          People

          • Assignee:
            Jochen Wiedmann
            Reporter:
            Gamaliel Amaudruz
          • Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development