Filter with special characters crashes JVM
------------------------------------------

                 Key: DIRSERVER-1196
                 URL: https://issues.apache.org/jira/browse/DIRSERVER-1196
             Project: Directory ApacheDS
          Issue Type: Bug
          Components: core
    Affects Versions: 1.5.3
         Environment: Windows running under jboss
            Reporter: Steve hammond


the following command 
         
FilterParser.parse("(memberOf=1.2.840.113556.1.4.1301=$#@&*()==,2.5.4.11=local,2.5.4.11=users,2.5.4.11=readimanager)");

will put the filter parser apparently into an infinite loop until the JVM 
crashes.

aparently it is the () in the middle.  LDAPStudio does not allow that in the 
filter, neither does ldapsearch.
So maybe just a check for parenthesis somewhere in the parse and a throw?  Are 
those the only 2 characters that a value cannot have?



-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to