directory-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Emmanuel Lecharny (JIRA)" <>
Subject [jira] Commented: (DIRSERVER-1196) Filter with special characters crashes JVM
Date Wed, 09 Jul 2008 21:01:33 GMT


Emmanuel Lecharny commented on DIRSERVER-1196:

Ok, there is an infinite loop in the parseSubstring() method of the FilterParser class.

Will be fixed soon.

> Filter with special characters crashes JVM
> ------------------------------------------
>                 Key: DIRSERVER-1196
>                 URL:
>             Project: Directory ApacheDS
>          Issue Type: Bug
>          Components: core
>    Affects Versions: 1.5.3
>         Environment: Windows running under jboss
>            Reporter: Steve hammond
>            Assignee: Emmanuel Lecharny
> the following command 
>          FilterParser.parse("(memberOf=1.2.840.113556.1.4.1301=$#@&*()==,,,");
> will put the filter parser apparently into an infinite loop until the JVM crashes.
> aparently it is the () in the middle.  LDAPStudio does not allow that in the filter,
neither does ldapsearch.
> So maybe just a check for parenthesis somewhere in the parse and a throw?  Are those
the only 2 characters that a value cannot have?

This message is automatically generated by JIRA.
You can reply to this email to add a comment to the issue online.

View raw message