[
https://issues.apache.org/jira/browse/XMLRPC-145?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Gamaliel Amaudruz updated XMLRPC-145:
-------------------------------------
Environment: Using Java 1.5 and XMLRPC-3.0 and above (was: Using Java 1.5
and XMLRPC-3.0)
> Paranoid mode of class Webserver doesn't work any more since v3.0
> -----------------------------------------------------------------
>
> Key: XMLRPC-145
> URL: https://issues.apache.org/jira/browse/XMLRPC-145
> Project: XML-RPC
> Issue Type: Bug
> Components: Releases, Source
> Affects Versions: 3.0a1, 3.0b1, 3.0rc1, 3.0, 3.1
> Environment: Using Java 1.5 and XMLRPC-3.0 and above
> Reporter: Gamaliel Amaudruz
>
> If you activate the paranoid mode of class WebServer since version 3.0, it
> rejects all connections because of the following bug in constructor of
> private class AddressMatcher:
> line ~89 of head revision of class WebServer:
> pattern[i] = Integer.parseInt(next);
> should be rolled back to:
> pattern[i] = (byte) Integer.parseInt(next);
> as in version 2.0
> Without the casting, the IP pattern is not correctly recorded and therefore
> all supposed accepted IPs are denied...
> It's a major bug of v3.0 to me.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
