You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@santuario.apache.org by "Scott Cantor (JIRA)" <ji...@apache.org> on 2010/12/07 19:34:14 UTC

[jira] Updated: (SANTUARIO-219) crash in DSIGKeyInfoX509::appendX509Certificate

     [ https://issues.apache.org/jira/browse/SANTUARIO-219?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Scott Cantor updated SANTUARIO-219:
-----------------------------------

    Fix Version/s: C++ 1.6.0

> crash in DSIGKeyInfoX509::appendX509Certificate
> -----------------------------------------------
>
>                 Key: SANTUARIO-219
>                 URL: https://issues.apache.org/jira/browse/SANTUARIO-219
>             Project: Santuario
>          Issue Type: Bug
>          Components: C++
>         Environment: Operating System: Windows Vista
> Platform: PC
>            Reporter: Patrick Hagelkruys
>            Assignee: XML Security Developers Mailing List
>             Fix For: C++ 1.6.0
>
>
> when i pass an base64 encoded certificate to appendX509Certificate the function crashes. This problem exists since i upgraded to the trunk version (before it, i used version 1.3.1 of xml-sec). 
> I have fixed the code by removing the ArrayJanitor and releasing the charX509 by myself:
> void DSIGKeyInfoX509::appendX509Certificate(const XMLCh * base64Certificate) {
> /* ... some code */
> X509Holder * h;
> XSECnew(h, X509Holder);
> m_X509List.push_back(h);
> h->mp_encodedX509 = b64Txt->getNodeValue();
> h->mp_cryptoX509 = XSECPlatformUtils::g_cryptoProvider->X509();
> char * charX509 = XMLString::transcode(h->mp_encodedX509);
> //ArrayJanitor<char> j_charX509(charX509);   //removed
> h->mp_cryptoX509->loadX509Base64Bin(charX509, (unsigned int) strlen(charX509));
> XMLString::release(&charX509);  //added instead of ArrayJanitor
> }
> I am using xerces-c 2.8, i have not tried this code with the xerces-c-3. 
> Maybe someone can verify this crash :)

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.