OpenLDAP
Up to top level
Build   Contrib   Development   Documentation   Historical   Incoming   Software Bugs   Software Enhancements   Web  

Logged in as guest

Viewing Contrib/4008
Full headers

From: jglynn@bjc.org
Subject: [JLDAP] LDAPConnection class does not handle null LDAPSearchQueue and LDAPSearchConstraints in search method
Compose comment
Download message
State:
2 replies: 1 2
1 followups: 1

Major security issue: yes  no

Notes:

Notification:


Date: Tue, 6 Sep 2005 22:04:54 GMT
From: jglynn@bjc.org
To: openldap-its@OpenLDAP.org
Subject: [JLDAP] LDAPConnection class does not handle null LDAPSearchQueue and LDAPSearchConstraints in search method
Full_Name: John Glynn
Version: CVS HEAD
OS: java
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (159.251.88.4)


Using a null LDAPSearchQueue as a parameter in the search method throws a
NullPointerException.  This behavior does not match that of the wrapped novell
LDAPConnection. Additionally, there does not seem to be any way of constructing
a LDAPSearchQueue since there are no public constructors for those, so this
method really should handle nulls. Changing the wrapped call from
search(...,queue,...) to
search(...,(queue==null?null:queue.getWrappedObject()),...) works like Novell
intended.


Followup 1

Download message
Date: Wed, 28 Nov 2007 04:41:38 -0700
From: "Rastogi Arpit" <rarpit@novell.com>
To: <openldap-its@OpenLDAP.org>
Cc: <jglynn@bjc.org>, "Nachiappan Palaniappan" <NPalaniappan@novell.com>,
        "Rajkumar V" <VRAJKUMAR@novell.com>
Subject: Re: (ITS#4008) [JLDAP] LDAPConnection class does not handle
	null LDAPSearchQueue and LDAPSearchConstraints in search method
This is a MIME message. If you are reading this text, you may want to 
consider changing to a mail reader or gateway that understands how to 
properly handle MIME multipart messages.

--=__PartD3F5D4E2.1__=
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

I tried to replicate the above problem using the following code snippet=20
=20
..........
...........
LDAPSearchQueue queue =3Dlc.search(searchBase,searchScope,searchFilter,null=
,false,null,null);
..............
..............
=20
But I am not able to find a NullPointerException as stated in the bug . It =
is working fine for me .
Please use the latest Jldap code and do let me know if I need to do =
something more to replicate the problem .=20

--=__PartD3F5D4E2.1__=
Content-Type: text/html; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Diso-8859-15=
">
<META content=3D"MSHTML 6.00.2900.3157" name=3DGENERATOR></HEAD>
<BODY style=3D"MARGIN: 4px 4px 1px; FONT: 10pt Segoe UI">
<DIV>I tried to replicate the above problem using the following code =
snippet </DIV>
<DIV>&nbsp;</DIV>
<DIV>..........</DIV>
<DIV>...........</DIV>
<DIV>LDAPSearchQueue queue
=3Dlc.search(searchBase,searchScope,searchFilter=
,null,false,null,null);</DIV>
<DIV>..............</DIV>
<DIV>..............</DIV>
<DIV>&nbsp;</DIV>
<DIV>But I am not able to find a&nbsp;NullPointerException&nbsp;as
stated =
in the bug . It is working fine for me .</DIV>
<DIV>Please use the latest Jldap code and do let me know if I need to do =
something more to replicate the problem . </DIV></BODY></HTML>

--=__PartD3F5D4E2.1__=--



Reply 1

Resend
From: Nachiappan Palaniappan <openldap-its@OpenLDAP.org>
To: jglynn@bjc.org
Subject: Re: [JLDAP] LDAPConnection class does not handle null LDAPSearchQueue and LDAPSearchConstraints in search method (ITS#4008)
Date: Thu Dec 13 06:03:06 2007
CC: rarpit@novell.com
John,

Could you please check the same issue with the latest source an come back? As
Arpit said above, we are not able to duplicate the issue at all.

Regards,
Palaniappan.


Reply 2

Resend
From: Nachiappan Palaniappan <openldap-its@OpenLDAP.org>
To: jglynn@bjc.org
Subject: Re: [JLDAP] LDAPConnection class does not handle null LDAPSearchQueue and LDAPSearchConstraints in search method (ITS#4008)
Date: Fri Jan 25 10:32:08 2008
CC: rarpit@novell.com
Please , look at the bug . As it has been for a long time in the feedback state
.
Please check with the latest source code if the problem is replicated and if it
does not please move the bug to closed state . We will be moving it to suspend
state after a couple of weeks time . If you find it replicated please feel free
to reopen the bug .

Up to top level
Build   Contrib   Development   Documentation   Historical   Incoming   Software Bugs   Software Enhancements   Web  

Logged in as guest


The OpenLDAP Issue Tracking System uses a hacked version of JitterBug

______________
© Copyright 2013, OpenLDAP Foundation, info@OpenLDAP.org