I found a bug in WebServer.java.

A private field "base64Codec" of the nested class "Connection"
is not initialized before used in the method "parseAuth()".

Thus, a NullPointerException is always thrown inside the "try"
block in the above method.  But the Exception is ignored.
At last, the arguments "user" and "password" of 
AuthenticatedXmlRpcHandler#execute() are always null.

The correction is obvious:
insert the following snippet befor the above try block.

    if (base64Codec == null) {
        base64Codec = new Base64();
    }


This problem is also reported by "Terrance Davis" 
<[EMAIL PROTECTED]>, on 3 Jun 2005.


----
Akihito NAKAMURA
  National Institute of 
    Advanced Industrial Science and Technology (AIST)
  Information Technology Research Institute


Reply via email to