[
https://issues.apache.org/jira/browse/JCR-1450?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jukka Zitting updated JCR-1450:
-------------------------------
Affects Version/s: 1.4
core 1.4.1
core 1.4.2
core 1.4.3
core 1.4.4
Fix Version/s: core 1.4.5
Merged to the 1.4 branch in revision 661637.
> move method of the MemoryFileSystem may accept invalid destination path
> resulting in invalid entries in FS
> ----------------------------------------------------------------------------------------------------------
>
> Key: JCR-1450
> URL: https://issues.apache.org/jira/browse/JCR-1450
> Project: Jackrabbit
> Issue Type: Bug
> Components: jackrabbit-core
> Affects Versions: 1.4, core 1.4.1, core 1.4.2, core 1.4.3, core 1.4.4
> Reporter: Denis Linine
> Assignee: Martijn Hendriks
> Priority: Trivial
> Fix For: core 1.4.5
>
>
> It seems there can be a problem with the move method of the MemoryFileSystem
> class: when looking at its code it looks that it can accept destinations,
> specifying folders that do not exist in the file system.
> For example, if there is a "somefolder/somefile" file and I call the method
> passing, say "somefolder/someotherfolder/somefile" as the destination. The
> destination will be accepted by the code even if "somefolder/someotherfolder"
> is not an existing folder and the function execution will result in a file
> having the "somefolder/someotherfolder/somefile" path within a file system
> having no "somefolder/someotherfolder" folder - the code should probably
> check whether the destination path is really a valid one. Such validation
> could be performed , for example, in the following way: take all path
> elements from the destination path except the last one and insure that the
> resulting path points to an existing folder, throw an exception otherwise.
> Currently I have no JackRabbit build/test environment set up and could not
> verify practically whether the issue described can really take place, the
> supposition is made after looking at the move method implementation.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
