santuario-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 47842] New: TemplateSign runtime issues due to ArrayJanitor
Date Tue, 15 Sep 2009 14:38:27 GMT
https://issues.apache.org/bugzilla/show_bug.cgi?id=47842

           Summary: TemplateSign runtime issues due to ArrayJanitor
           Product: Security
           Version: C++ 1.5.1
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: normal
          Priority: P2
         Component: C++ Signature
        AssignedTo: security-dev@xml.apache.org
        ReportedBy: cb@breitschwerdt.info


Hello,

I have been experimenting with the templatesign.exe from the XML-Security
Library. My interest was in signing the template using RSA key with SHA256
digest.

Environment: 

Xerces 2.8.0
No Xalan
xml-security-c-1.5.1
Visual Studio 2005

After building the XML Security library and the tools (like templatesign.exe) I
ran the following command on a self signed cert and key:

templatesign.exe -s My.com -r key.pem secret -x cacert2.pem template.xml

The program crashed.

After some hours debugging I found out that there seems to be an issue with the
ArrayJanitor(s) destructors. 

I commented out the declaration of 
// ArrayJanitor<XMLCh> j_encodedName(encodedName); (in DSIGKeyInfoX509.cpp
, line 447) and 

//ArrayJanitor<char> j_charX509(charX509); (in DSIGKeyInfoX509.cpp
, line 568)

Recompiled and it works now.

What are those ArrayJanitor templates good for? I can't see that the
j_name(name) array are ever used?

thanks,
Christian

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Mime
View raw message