[jira] Updated: (XMLRPC-145) Paranoid mode of class Webserver doesn't work any more since v3.0

["Gamaliel Amaudruz (JIRA)" <xm...@ws.apache.org>]

     [ https://issues.apache.org/jira/browse/XMLRPC-145?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Gamaliel Amaudruz updated XMLRPC-145:
-------------------------------------

    Environment: Using Java 1.5 and XMLRPC-3.0 and above  (was: Using Java 1.5 and XMLRPC-3.0)

> Paranoid mode of class Webserver doesn't work any more since v3.0
> -----------------------------------------------------------------
>
>                 Key: XMLRPC-145
>                 URL: https://issues.apache.org/jira/browse/XMLRPC-145
>             Project: XML-RPC
>          Issue Type: Bug
>          Components: Releases, Source
>    Affects Versions: 3.0a1, 3.0b1, 3.0rc1, 3.0, 3.1
>         Environment: Using Java 1.5 and XMLRPC-3.0 and above
>            Reporter: Gamaliel Amaudruz
>
> If you activate the paranoid mode of class WebServer since version 3.0, it rejects all connections because of the following bug in constructor of private class AddressMatcher:
> line ~89 of head revision of class WebServer:
> pattern[i] = Integer.parseInt(next);
> should be rolled back to:
> pattern[i] = (byte) Integer.parseInt(next);
> as in version 2.0
> Without the casting, the IP pattern is not correctly recorded and therefore all supposed accepted IPs are denied...
> It's a major bug of v3.0 to me.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.