Hi all, A JIRA for the same was raised under ODE-590 by me. Since this has been resolved in ODE-591 it was closed.
( https://issues.apache.org/jira/browse/ODE-590?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ) Regards, Chamith On Wed, Apr 22, 2009 at 12:49 AM, Alexis Midon <[email protected]> wrote: > fixed by ODE-591. > thanks for the catch > > On Mon, Apr 20, 2009 at 2:19 PM, Alex Boisvert <[email protected]> > wrote: > > > On Mon, Apr 20, 2009 at 12:23 PM, buddhika chamith > > <[email protected]>wrote: > > > > > This code is vulnerable if a carriage return is present after the > <name> > > > tag before <package> tag. AFAIK this happens because of the behaviour > of > > > Axiom. Axiom creates an OMText node for the carriage return. So when > > > getNextOMSibling() is called instead of <package> element OMText is > > > selected. But since the OMText cannot be cast to OMElement a > > > ClassCastException occurs. This can be avoided by obtaining zipart > > OMElement > > > with a call to getChild() or any related method which returns an > > OMElement > > > reference. I can provide a patch for this if necessary. > > > > > > Good catch! Yes, a patch would be much appreciated. > > > > alex > > >
