Hello,
I noticed a very strange behavior during a stresstest of our application.
after several days of runtime this stacktrace below occured. I have
never seen this before
and the application is in use for nearly two years now.
is there any known bug that causes this ?
we use xmlsecurity v1.2.1 with xerces 2.6.2
an enveloped xml signature with TRANSFORM_C14N_OMIT_COMMENTS should have
been created.
there were also 2 external binary files being included in the signature
java.lang.ArrayIndexOutOfBoundsException: 128
at org.apache.xerces.dom.DeferredDocumentImpl.getChunkIndex(Unknown Source)
at org.apache.xerces.dom.DeferredDocumentImpl.getNodeObject(Unknown Source)
at
org.apache.xerces.dom.DeferredDocumentImpl.synchronizeChildren(Unknown
Source)
at
org.apache.xerces.dom.DeferredElementNSImpl.synchronizeChildren(Unknown
Source)
at org.apache.xerces.dom.ParentNode.hasChildNodes(Unknown Source)
at
org.apache.xml.security.utils.XMLUtils.circumventBug2650recurse(Unknown
Source)
at
org.apache.xml.security.utils.XMLUtils.circumventBug2650recurse(Unknown
Source)
at
org.apache.xml.security.utils.XMLUtils.circumventBug2650recurse(Unknown
Source)
at
org.apache.xml.security.utils.XMLUtils.circumventBug2650recurse(Unknown
Source)
at
org.apache.xml.security.utils.XMLUtils.circumventBug2650recurse(Unknown
Source)
at org.apache.xml.security.utils.XMLUtils.circumventBug2650(Unknown Source)
at
org.apache.xml.security.signature.XMLSignatureInput.getNodeSet(XMLSignatureInput.java:239)
at
org.apache.xml.security.transforms.implementations.TransformXPath.enginePerformTransform(Unknown
Source)
at org.apache.xml.security.transforms.Transform.performTransform(Unknown
Source)
at
org.apache.xml.security.transforms.Transforms.performTransforms(Unknown
Source)
at
org.apache.xml.security.signature.Reference.getContentsAfterTransformation(Unknown
Source)
at
org.apache.xml.security.signature.Reference.dereferenceURIandPerformTransforms(Unknown
Source)
at org.apache.xml.security.signature.Reference.calculateDigest(Unknown
Source)
at
org.apache.xml.security.signature.Reference.generateDigestValue(Unknown
Source)
at
org.apache.xml.security.signature.Manifest.generateDigestValues(Unknown
Source)
at org.apache.xml.security.signature.XMLSignature.sign(Unknown Source)
--
Mit freundlichen Grüßen / Best Regards,
Michael Häusler
