DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://issues.apache.org/bugzilla/show_bug.cgi?id=35580>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=35580 Summary: XMLSignatureInput blocks file which is signed Product: Security Version: Java 1.2.1 Platform: Sun OS/Version: Windows XP Status: NEW Severity: normal Priority: P2 Component: Signature AssignedTo: security-dev@xml.apache.org ReportedBy: [EMAIL PROTECTED] When signing a binary file generating a detached signature, the file stream reference to the file is not closed. This means that the file is blocked until the JVM is terminated. The problem can be solved by changing the lines in the bottom of XMLSignatureInput.java from bytes=JavaUtils.getBytesFromStream(_inputOctetStreamProxy); _inputOctetStreamProxy=new ByteArrayInputStream(bytes); to bytes=JavaUtils.getBytesFromStream(_inputOctetStreamProxy); _inputOctetStreamProxy.close(); // added line _inputOctetStreamProxy=new ByteArrayInputStream(bytes); The bug can be reproduced by generating a detached signature of a file. After calling the sign method a Thread.sleep(20000) should be called to keep the JVM running. Try to delete the file while the thread is sleeping. -- Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.
