You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@santuario.apache.org by michael haeusler <ha...@ponton-consulting.de> on 2005/06/09 11:00:57 UTC

strange problem while creating xml signature

Hello,
I noticed a very strange behavior during a stresstest of our application.
after several days of runtime this stacktrace below occured. I have 
never seen this before
and the application is in use for nearly two years now.
is there any known bug that causes this ?
we use xmlsecurity v1.2.1  with xerces 2.6.2
an enveloped xml signature with TRANSFORM_C14N_OMIT_COMMENTS should have 
been created.
there were also 2 external binary files being included in the signature

java.lang.ArrayIndexOutOfBoundsException: 128
at org.apache.xerces.dom.DeferredDocumentImpl.getChunkIndex(Unknown Source)
at org.apache.xerces.dom.DeferredDocumentImpl.getNodeObject(Unknown Source)
at 
org.apache.xerces.dom.DeferredDocumentImpl.synchronizeChildren(Unknown 
Source)
at 
org.apache.xerces.dom.DeferredElementNSImpl.synchronizeChildren(Unknown 
Source)
at org.apache.xerces.dom.ParentNode.hasChildNodes(Unknown Source)
at 
org.apache.xml.security.utils.XMLUtils.circumventBug2650recurse(Unknown 
Source)
at 
org.apache.xml.security.utils.XMLUtils.circumventBug2650recurse(Unknown 
Source)
at 
org.apache.xml.security.utils.XMLUtils.circumventBug2650recurse(Unknown 
Source)
at 
org.apache.xml.security.utils.XMLUtils.circumventBug2650recurse(Unknown 
Source)
at 
org.apache.xml.security.utils.XMLUtils.circumventBug2650recurse(Unknown 
Source)
at org.apache.xml.security.utils.XMLUtils.circumventBug2650(Unknown Source)
at 
org.apache.xml.security.signature.XMLSignatureInput.getNodeSet(XMLSignatureInput.java:239)
at 
org.apache.xml.security.transforms.implementations.TransformXPath.enginePerformTransform(Unknown 
Source)
at org.apache.xml.security.transforms.Transform.performTransform(Unknown 
Source)
at 
org.apache.xml.security.transforms.Transforms.performTransforms(Unknown 
Source)
at 
org.apache.xml.security.signature.Reference.getContentsAfterTransformation(Unknown 
Source)
at 
org.apache.xml.security.signature.Reference.dereferenceURIandPerformTransforms(Unknown 
Source)
at org.apache.xml.security.signature.Reference.calculateDigest(Unknown 
Source)
at 
org.apache.xml.security.signature.Reference.generateDigestValue(Unknown 
Source)
at 
org.apache.xml.security.signature.Manifest.generateDigestValues(Unknown 
Source)
at org.apache.xml.security.signature.XMLSignature.sign(Unknown Source)

-- 
Mit freundlichen Grüßen / Best Regards,
Michael Häusler



Re: strange problem while creating xml signature

Posted by michael haeusler <ha...@ponton-consulting.de>.
Thanks for the quick response.
I could not reproduce the error yet, and I doubt it will be possible to 
do it, since it never
happend before.
maybe the RAM of the system is unstable.

Raul Benito wrote:

>Hi Michael,
>  It looks weird too me, it seems more a xerces problem than xml-sec.
>But is going to be a really tiring bug hunting, can you try to
>reproduce with a simplest possible code, and send to us as a
>testcase?.
>This way we can test ourselves and send the bug to xerces if possible.
>
>
>Regards,
>
>Raul
>
>On 6/9/05, michael haeusler <ha...@ponton-consulting.de> wrote:
>  
>
>>Hello,
>>I noticed a very strange behavior during a stresstest of our application.
>>after several days of runtime this stacktrace below occured. I have
>>never seen this before
>>and the application is in use for nearly two years now.
>>is there any known bug that causes this ?
>>we use xmlsecurity v1.2.1  with xerces 2.6.2
>>an enveloped xml signature with TRANSFORM_C14N_OMIT_COMMENTS should have
>>been created.
>>there were also 2 external binary files being included in the signature
>>
>>java.lang.ArrayIndexOutOfBoundsException: 128
>>at org.apache.xerces.dom.DeferredDocumentImpl.getChunkIndex(Unknown Source)
>>at org.apache.xerces.dom.DeferredDocumentImpl.getNodeObject(Unknown Source)
>>at
>>org.apache.xerces.dom.DeferredDocumentImpl.synchronizeChildren(Unknown
>>Source)
>>at
>>org.apache.xerces.dom.DeferredElementNSImpl.synchronizeChildren(Unknown
>>Source)
>>at org.apache.xerces.dom.ParentNode.hasChildNodes(Unknown Source)
>>at
>>org.apache.xml.security.utils.XMLUtils.circumventBug2650recurse(Unknown
>>Source)
>>at
>>org.apache.xml.security.utils.XMLUtils.circumventBug2650recurse(Unknown
>>Source)
>>at
>>org.apache.xml.security.utils.XMLUtils.circumventBug2650recurse(Unknown
>>Source)
>>at
>>org.apache.xml.security.utils.XMLUtils.circumventBug2650recurse(Unknown
>>Source)
>>at
>>org.apache.xml.security.utils.XMLUtils.circumventBug2650recurse(Unknown
>>Source)
>>at org.apache.xml.security.utils.XMLUtils.circumventBug2650(Unknown Source)
>>at
>>org.apache.xml.security.signature.XMLSignatureInput.getNodeSet(XMLSignatureInput.java:239)
>>at
>>org.apache.xml.security.transforms.implementations.TransformXPath.enginePerformTransform(Unknown
>>Source)
>>at org.apache.xml.security.transforms.Transform.performTransform(Unknown
>>Source)
>>at
>>org.apache.xml.security.transforms.Transforms.performTransforms(Unknown
>>Source)
>>at
>>org.apache.xml.security.signature.Reference.getContentsAfterTransformation(Unknown
>>Source)
>>at
>>org.apache.xml.security.signature.Reference.dereferenceURIandPerformTransforms(Unknown
>>Source)
>>at org.apache.xml.security.signature.Reference.calculateDigest(Unknown
>>Source)
>>at
>>org.apache.xml.security.signature.Reference.generateDigestValue(Unknown
>>Source)
>>at
>>org.apache.xml.security.signature.Manifest.generateDigestValues(Unknown
>>Source)
>>at org.apache.xml.security.signature.XMLSignature.sign(Unknown Source)
>>
>>--
>>Mit freundlichen Grüßen / Best Regards,
>>Michael Häusler
>>
>>
>>
>>    
>>
>
>
>  
>

-- 
Mit freundlichen Grüßen / Best Regards,
Michael Häusler
__________________________________________________________________
Ponton Consulting GmbH                 voice:  + 49.40.69213-340
http://www.ponton-consulting.de/       fax:    + 49.40.69213-355
Dorotheenstraße 60
D-22301 Hamburg
                       Ponton Consulting is a Member of C1 Group
__________________________________________________________________

HRB 81480, AG Hamburg, Managing Director: Dr. Michael Merz
Ponton Consulting is a Member of C1 Group (www.c1-group.com)
__________________________________________________________________


Re: strange problem while creating xml signature

Posted by Raul Benito <ra...@gmail.com>.
Hi Michael,
  It looks weird too me, it seems more a xerces problem than xml-sec.
But is going to be a really tiring bug hunting, can you try to
reproduce with a simplest possible code, and send to us as a
testcase?.
This way we can test ourselves and send the bug to xerces if possible.


Regards,

Raul

On 6/9/05, michael haeusler <ha...@ponton-consulting.de> wrote:
> Hello,
> I noticed a very strange behavior during a stresstest of our application.
> after several days of runtime this stacktrace below occured. I have
> never seen this before
> and the application is in use for nearly two years now.
> is there any known bug that causes this ?
> we use xmlsecurity v1.2.1  with xerces 2.6.2
> an enveloped xml signature with TRANSFORM_C14N_OMIT_COMMENTS should have
> been created.
> there were also 2 external binary files being included in the signature
> 
> java.lang.ArrayIndexOutOfBoundsException: 128
> at org.apache.xerces.dom.DeferredDocumentImpl.getChunkIndex(Unknown Source)
> at org.apache.xerces.dom.DeferredDocumentImpl.getNodeObject(Unknown Source)
> at
> org.apache.xerces.dom.DeferredDocumentImpl.synchronizeChildren(Unknown
> Source)
> at
> org.apache.xerces.dom.DeferredElementNSImpl.synchronizeChildren(Unknown
> Source)
> at org.apache.xerces.dom.ParentNode.hasChildNodes(Unknown Source)
> at
> org.apache.xml.security.utils.XMLUtils.circumventBug2650recurse(Unknown
> Source)
> at
> org.apache.xml.security.utils.XMLUtils.circumventBug2650recurse(Unknown
> Source)
> at
> org.apache.xml.security.utils.XMLUtils.circumventBug2650recurse(Unknown
> Source)
> at
> org.apache.xml.security.utils.XMLUtils.circumventBug2650recurse(Unknown
> Source)
> at
> org.apache.xml.security.utils.XMLUtils.circumventBug2650recurse(Unknown
> Source)
> at org.apache.xml.security.utils.XMLUtils.circumventBug2650(Unknown Source)
> at
> org.apache.xml.security.signature.XMLSignatureInput.getNodeSet(XMLSignatureInput.java:239)
> at
> org.apache.xml.security.transforms.implementations.TransformXPath.enginePerformTransform(Unknown
> Source)
> at org.apache.xml.security.transforms.Transform.performTransform(Unknown
> Source)
> at
> org.apache.xml.security.transforms.Transforms.performTransforms(Unknown
> Source)
> at
> org.apache.xml.security.signature.Reference.getContentsAfterTransformation(Unknown
> Source)
> at
> org.apache.xml.security.signature.Reference.dereferenceURIandPerformTransforms(Unknown
> Source)
> at org.apache.xml.security.signature.Reference.calculateDigest(Unknown
> Source)
> at
> org.apache.xml.security.signature.Reference.generateDigestValue(Unknown
> Source)
> at
> org.apache.xml.security.signature.Manifest.generateDigestValues(Unknown
> Source)
> at org.apache.xml.security.signature.XMLSignature.sign(Unknown Source)
> 
> --
> Mit freundlichen Grüßen / Best Regards,
> Michael Häusler
> 
> 
> 


-- 
http://r-bg.com