You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "Emmanuel Lecharny (JIRA)" <di...@incubator.apache.org> on 2006/01/13 02:16:19 UTC

[jira] Created: (DIRSNICKERS-121) The ASN.1 decoder accepts a LdapMessage which is too short

The ASN.1 decoder accepts a LdapMessage which is too short
----------------------------------------------------------

         Key: DIRSNICKERS-121
         URL: http://issues.apache.org/jira/browse/DIRSNICKERS-121
     Project: Directory ASN1
        Type: Bug
    Reporter: Emmanuel Lecharny
 Assigned to: Emmanuel Lecharny 


There is a big side-effect in Twix. If we feed it with an LdapMessage that does not contain all the needed fields of the SEQUENCE, it is still decoded correctly by the Asn1Decoder. 

For instance, 0x30 0x03 0x02 0x01 0x01 is valid for twix, but this is not an acceptable LdapMessage (it only contains the MessageId, without any protocol Operation).



-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


[jira] Closed: (DIRSNICKERS-121) The ASN.1 decoder accepts a LdapMessage which is too short

Posted by "Emmanuel Lecharny (JIRA)" <di...@incubator.apache.org>.
     [ http://issues.apache.org/jira/browse/DIRSNICKERS-121?page=all ]
     
Emmanuel Lecharny closed DIRSNICKERS-121:
-----------------------------------------


Fixed with a little disgusting flag.

> The ASN.1 decoder accepts a LdapMessage which is too short
> ----------------------------------------------------------
>
>          Key: DIRSNICKERS-121
>          URL: http://issues.apache.org/jira/browse/DIRSNICKERS-121
>      Project: Directory ASN1
>         Type: Bug
>     Reporter: Emmanuel Lecharny
>     Assignee: Emmanuel Lecharny

>
> There is a big side-effect in Twix. If we feed it with an LdapMessage that does not contain all the needed fields of the SEQUENCE, it is still decoded correctly by the Asn1Decoder. 
> For instance, 0x30 0x03 0x02 0x01 0x01 is valid for twix, but this is not an acceptable LdapMessage (it only contains the MessageId, without any protocol Operation).

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


[jira] Resolved: (DIRSNICKERS-121) The ASN.1 decoder accepts a LdapMessage which is too short

Posted by "Emmanuel Lecharny (JIRA)" <di...@incubator.apache.org>.
     [ http://issues.apache.org/jira/browse/DIRSNICKERS-121?page=all ]
     
Emmanuel Lecharny resolved DIRSNICKERS-121:
-------------------------------------------

    Resolution: Fixed

A flag has been added. It must be set for every transition that could drive to a end. It would be better if the decoder was able to handle transitions "to", not transition "from", but that would need a complete rewrite of it.

> The ASN.1 decoder accepts a LdapMessage which is too short
> ----------------------------------------------------------
>
>          Key: DIRSNICKERS-121
>          URL: http://issues.apache.org/jira/browse/DIRSNICKERS-121
>      Project: Directory ASN1
>         Type: Bug
>     Reporter: Emmanuel Lecharny
>     Assignee: Emmanuel Lecharny

>
> There is a big side-effect in Twix. If we feed it with an LdapMessage that does not contain all the needed fields of the SEQUENCE, it is still decoded correctly by the Asn1Decoder. 
> For instance, 0x30 0x03 0x02 0x01 0x01 is valid for twix, but this is not an acceptable LdapMessage (it only contains the MessageId, without any protocol Operation).

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira