You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@santuario.apache.org by bu...@apache.org on 2007/01/30 10:49:13 UTC
DO NOT REPLY [Bug 41494] New: - BufferOverflowException when encrypting large documents
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=41494>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=41494
Summary: BufferOverflowException when encrypting large documents
Product: Security
Version: unspecified
Platform: All
URL: http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=49496
31
OS/Version: other
Status: NEW
Severity: normal
Priority: P2
Component: Encryption
AssignedTo: security-dev@xml.apache.org
ReportedBy: fop-dev@cumiskey.com
From: Sean.Mullan@Sun.COM [mailto:Sean.Mullan@Sun.COM]
Sent: 24 January 2007 14:54
To: security-dev@xml.apache.org
Subject: Re: BufferOverflowException when encrypting large documents
Chris Harris wrote:
> Hi all,
>
>
>
> We have a requirement to encrypt large xml documents and our
> experiencing the following error:
>
>
>
> Caused by: java.nio.BufferOverflowException
>
> at
> java.nio.charset.CoderResult.throwException(CoderResult.java:259)
>
> at
> java.lang.StringCoding$CharsetSE.encode(StringCoding.java:340)
>
> at java.lang.StringCoding.encode(StringCoding.java:374)
>
> at java.lang.StringCoding.encode(StringCoding.java:380)
>
> at java.lang.String.getBytes(String.java:590)
>
> at
> org.apache.xml.security.encryption.XMLCipher.encryptData(Unknown
> Source)
>
> at
> org.apache.xml.security.encryption.XMLCipher.encryptElementContent(Unk
> nown
> Source)
>
> at
> org.apache.xml.security.encryption.XMLCipher.doFinal(Unknown Source)
>
> at
> org.apache.ws.security.message.WSSecEncrypt.doEncryption(WSSecEncrypt.
> java:455)
>
>
>
>
>
> After doing some research, I discovered that this is actually being
> caused by a bug in the JVM:
>
>
>
> http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4949631
>
>
>
> The sun bug log contains a number of workarounds however to get around
> this issue the XMLCipher class would need to change the String before
> it calls getBytes. I have attached a patch version of XMLCipher along
> with a String utility class.
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
DO NOT REPLY [Bug 41494] - BufferOverflowException when encrypting large documents
Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=41494>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=41494
sean.mullan@sun.com changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |WORKSFORME
------- Additional Comments From sean.mullan@sun.com 2007-02-13 08:49 -------
The bug that causes this problem
(http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4949631)
has since been fixed in JDK 6, JDK 5 (update 3), and JDK 1.4.2_08. Please
update your JDK and the problem should be fixed.
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
DO NOT REPLY [Bug 41494] - BufferOverflowException when encrypting large documents
Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=41494>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=41494
------- Additional Comments From fop-dev@cumiskey.com 2007-01-30 08:46 -------
Created an attachment (id=19484)
--> (http://issues.apache.org/bugzilla/attachment.cgi?id=19484&action=view)
Fixes BufferOverflowException when encrypting large documents
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
DO NOT REPLY [Bug 41494] - BufferOverflowException when encrypting large documents
Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=41494>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=41494
sean.mullan@sun.com changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|RESOLVED |CLOSED
------- Additional Comments From sean.mullan@sun.com 2007-09-19 12:26 -------
Closing old bugs.
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.