You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@aries.apache.org by "Amichai Rothman (Jira)" <ji...@apache.org> on 2023/09/18 08:22:00 UTC

[jira] [Created] (ARIES-2123) TCP Provider allows invoking arbitrary methods on the service object

Amichai Rothman created ARIES-2123:
--------------------------------------

             Summary: TCP Provider allows invoking arbitrary methods on the service object
                 Key: ARIES-2123
                 URL: https://issues.apache.org/jira/browse/ARIES-2123
             Project: Aries
          Issue Type: Bug
          Components: Remote Service Admin
    Affects Versions: rsa-1.16.1
            Reporter: Amichai Rothman


The TCP Provider method invoker invokes any method on the service object. It should restrict invocations only to methods that are declared in the exported interfaces, and prevent invocation of other implementation/private methods that are not explicitly exported.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)