[ 
https://issues.apache.org/jira/browse/DIRAPI-459?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18120616#comment-18120616
 ] 

Emmanuel Lécharny commented on DIRAPI-459:
------------------------------------------

Found by Claude

> FilterParser recurses without depth limit; StackOverflowError on nested 
> filters
> -------------------------------------------------------------------------------
>
>                 Key: DIRAPI-459
>                 URL: https://issues.apache.org/jira/browse/DIRAPI-459
>             Project: Directory Client API
>          Issue Type: Bug
>    Affects Versions: 2.1.8
>            Reporter: Emmanuel Lécharny
>            Priority: Major
>             Fix For: 2.1.9
>
>
> A server returns a _SearchResultDone_ carrying a referral *URL* whose filter 
> part is 15,000 repetitions of _"(!"_.
> _AddReferral_ constructs new _LdapUrl(url)_ which calls _FilterParser.parse_.
> The recursion overflows the stack and the _StackOverflowError_ kills the 
> *I/O* processing of the response and, depending on the host application, the 
> worker thread. 
> Alternatively an advanced-search box passing a raw user filter to 
> connection.search hits the same recursion.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to