Mailing-List: contact axis-c-user-help@ws.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Apache AXIS C User List" <axis-c-user@ws.apache.org>
DomainKey-Status: good
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  h=Message-ID:Received:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding;
  b=Yc8FZL+V+Mbl16bwYJRIsXqG4y7ae9NDxbN62IFXgPZTwyy4IwdmUBvha0IAEFOR+rTVlwclvgCCy2btiAYm1/vRAY6q4DB/ey5k7u8EeKddNXg85LDj0AlpPbx/a4umUbK2ZdrWeVRKIY3oZlbqs7BC/kgPDvXrqJCn2Fx8XdM=
  ;
Message-ID: <20060919172950.19090.qmail@web53206.mail.yahoo.com>
Date: Tue, 19 Sep 2006 10:29:50 -0700 (PDT)
From: Kamlesh kumar <kamaal79@yahoo.com>
Subject: Re: xsd deserialization for integer types broken
To: Apache AXIS C User List <axis-c-user@ws.apache.org>
In-Reply-To: 
 <OF7AF1919A.EB5D02BD-ON802571EE.002EA4E0-802571EE.002F20E2@uk.ibm.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit

Thanks, that explains why things are done the way it
is. However, even toggling won't help in my case since
I wany any non-Axis client to be able to send request
to my Axis C++ server. I have no guarantee on what the
client will be sending and therefore we need to
validate during both serializing and deserializing. 

-Kamlesh

--- John Hawkins <HAWKINSJ@uk.ibm.com> wrote:

> I won't comment on the broken code but I will
> comment on the reason why 
> max and min values on reply msgs aren't validated.
> 
> The view was taken that the server was already going
> to do validation and 
> therefore that the client could have a reasonable
> trust in the values 
> coming across the wire. You can argue either way -
> it would be ideal if 
> someone would write it so that validation could be
> toggled - but there 
> were more important things to do at the time.
> 
> regards,
> John.
> 
> 
> 
> 
> 
> Kamlesh kumar <kamaal79@yahoo.com> 
> 18/09/2006 21:30
> Please respond to
> "Apache AXIS C User List"
> <axis-c-user@ws.apache.org>
> 
> 
> To
> axis-c-user@ws.apache.org
> cc
> 
> Subject
> xsd deserialization for integer types broken
> 
> 
> 
> 
> 
> 
> The xsd deserialization for integer types is awfully
> broken.
> 
> For instance, calling the getElementAsInt() API for
> the XML fragment
> 
> "<foo>30a</foo>" 
> 
> I would have expected it to either return 30 or
> ideally throw an exception. Instead, I get a value
> of
> 300 :( 
> 
> Similarly, calling 
> 
> "<foo>30 </foo>" returns a value of 300 !
> 
> I think the following change might have introduced
> this bug. 
>
http://svn.apache.org/viewvc/webservices/axis/trunk/c/src/soap/xsd/Integer.cpp?r1=261408&r2=261497&diff_format=h
> 
> 
> Further, why aren't we validating against the
> maximum
> and minimum value for each type ?
> 
> For instance, getElementAsShort() for the XML
> fragment
> 
> "<foo1>32768</foo1>" returns -1. I would have
> expected
> AxisC++ to throw an exception saying it exceeds the
> max value of short instead of silently returning
> wrong
> values. 
> 
> I am surprised why this bug hasn't been seen till
> now.
> 
> Regardless, I think it should be top priority to fix
> this issue. 
> 
>  
> 
> 
> 
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam
> protection around 
> http://mail.yahoo.com 
> 
>
---------------------------------------------------------------------
> To unsubscribe, e-mail:
> axis-c-user-unsubscribe@ws.apache.org
> For additional commands, e-mail:
> axis-c-user-help@ws.apache.org
> 
> 
> 


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

---------------------------------------------------------------------
To unsubscribe, e-mail: axis-c-user-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-c-user-help@ws.apache.org