[ 
https://issues.apache.org/jira/browse/THRIFT-2466?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Benoit Sigoure updated THRIFT-2466:
-----------------------------------

    Attachment: 
THRIFT-2466-Silently-ignore-clients-that-couldn-t-be-created.patch

Patch to fix the issue.

> Improper error handling for SSL/TLS connections that don't complete a 
> handshake
> -------------------------------------------------------------------------------
>
>                 Key: THRIFT-2466
>                 URL: https://issues.apache.org/jira/browse/THRIFT-2466
>             Project: Thrift
>          Issue Type: Bug
>          Components: Python - Library
>    Affects Versions: 0.9.1
>            Reporter: Benoit Sigoure
>         Attachments: 
> THRIFT-2466-Silently-ignore-clients-that-couldn-t-be-created.patch
>
>
> The code in {{TSSLServerSocket.accept()}} silently drops all {{SSLError}} and 
> returns {{None}} instead, but none of the {{TServer}} implementations handle 
> this case properly, which cause them to pass {{None}} around a bunch, which 
> eventually cause weird {{AttributeError}} exceptions.
> This bug is easy to reproduce: just open a socket to a Python Thrift server 
> that uses SSL/TLS and close the connection right away.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to