http://nagoya.apache.org/bugzilla/show_bug.cgi?id=2304

*** shadow/2304 Mon Jun 25 02:43:21 2001
--- shadow/2304.tmp.23033       Mon Jun 25 02:43:21 2001
***************
*** 0 ****
--- 1,39 ----
+ +============================================================================+
+ | ORO dies on evaluating \001c and takes tomcat with it                      |
+ +----------------------------------------------------------------------------+
+ |        Bug #: 2304                        Product: ORO                     |
+ |       Status: NEW                         Version: 2.0.2                   |
+ |   Resolution:                            Platform: PC                      |
+ |     Severity: Critical                 OS/Version: Linux                   |
+ |     Priority: Other                     Component: Main                    |
+ +----------------------------------------------------------------------------+
+ |  Assigned To: [EMAIL PROTECTED]                                   |
+ |  Reported By: [EMAIL PROTECTED]                                      |
+ |      CC list: Cc:                                                          |
+ +----------------------------------------------------------------------------+
+ |          URL: http://www.streetparade.com                                  |
+ +============================================================================+
+ |                              DESCRIPTION                                   |
+ if in the following snippet, 'dummy' contains control characters like \001c,
+ \001f, etc., ORO dies with a stack overflow and takes tomcat down too.
+ 
+    public static void checkForbiddenKeys (StringBuffer myError, String dummy,
+ String msg) {
+       try {
+          PatternCompiler compiler = new Perl5Compiler();
+          Pattern regex = compiler.compile("^([_]?[0-9a-zA-Z])*$");
+          PatternMatcher matcher=new Perl5Matcher();
+          if (!matcher.matches(dummy, regex)) {
+         myError.append(msg+":bad_");
+          }
+       }
+ 
+ 
+ jdk: 1.3.0_02
+ tomcat: 3.2.2
+ 
+ i'll gladly provide any additional information you need.
+ 
+ many thanks
+ 
+ Nico Wieland
\ No newline at end of file

Reply via email to