https://issues.apache.org/bugzilla/show_bug.cgi?id=47842
Summary: TemplateSign runtime issues due to ArrayJanitor
Product: Security
Version: C++ 1.5.1
Platform: PC
OS/Version: Windows XP
Status: NEW
Severity: normal
Priority: P2
Component: C++ Signature
AssignedTo: security-dev@xml.apache.org
ReportedBy: c...@breitschwerdt.info
Hello,
I have been experimenting with the templatesign.exe from the XML-Security
Library. My interest was in signing the template using RSA key with SHA256
digest.
Environment:
Xerces 2.8.0
No Xalan
xml-security-c-1.5.1
Visual Studio 2005
After building the XML Security library and the tools (like templatesign.exe) I
ran the following command on a self signed cert and key:
templatesign.exe -s My.com -r key.pem secret -x cacert2.pem template.xml
The program crashed.
After some hours debugging I found out that there seems to be an issue with the
ArrayJanitor(s) destructors.
I commented out the declaration of
// ArrayJanitor<XMLCh> j_encodedName(encodedName); (in DSIGKeyInfoX509.cpp
, line 447) and
//ArrayJanitor<char> j_charX509(charX509); (in DSIGKeyInfoX509.cpp
, line 568)
Recompiled and it works now.
What are those ArrayJanitor templates good for? I can't see that the
j_name(name) array are ever used?
thanks,
Christian
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
