Paranoid mode of class Webserver doesn't work any more since v3.0
-----------------------------------------------------------------

                 Key: XMLRPC-145
                 URL: https://issues.apache.org/jira/browse/XMLRPC-145
             Project: XML-RPC
          Issue Type: Bug
          Components: Releases, Source
    Affects Versions: 3.0a1, 3.0b1, 3.0rc1, 3.0, 3.1
         Environment: Using Java 1.5 and XMLRPC-3.0
            Reporter: Gamaliel Amaudruz


If you activate the paranoid mode of class WebServer since version 3.0, it 
rejects all connections because of the following bug in constructor of private 
class AddressMatcher:
line ~89 of head revision of class WebServer:
pattern[i] = Integer.parseInt(next);
should be rolled back to:
pattern[i] = (byte) Integer.parseInt(next);
as in version 2.0
Without the casting, the IP pattern is not correctly recorded and therefore all 
supposed accepted IPs are denied...

It's a major bug of v3.0 to me.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to