[jboss-cvs] JBossAS SVN: r58810 - in branches/JBoss_3_2_7_CP: console/src/main/org/jboss/console/manager testsuite/src/main/org/jboss/test testsuite/src/main/org/jboss/test/console testsuite/src/main/org/jboss/test/console/jbas3861
jboss-cvs-commits at lists.jboss.org
jboss-cvs-commits at lists.jboss.org
Fri Dec 1 14:20:51 EST 2006
Author: vivekl at redhat.com
Date: 2006-12-01 14:20:44 -0500 (Fri, 01 Dec 2006)
New Revision: 58810
Added:
branches/JBoss_3_2_7_CP/testsuite/src/main/org/jboss/test/console/
branches/JBoss_3_2_7_CP/testsuite/src/main/org/jboss/test/console/jbas3861/
branches/JBoss_3_2_7_CP/testsuite/src/main/org/jboss/test/console/jbas3861/JBAS3861UnitTestCase.java
Removed:
branches/JBoss_3_2_7_CP/testsuite/src/main/org/jboss/test/console/jbas3861/
Modified:
branches/JBoss_3_2_7_CP/console/src/main/org/jboss/console/manager/DeploymentFileRepository.java
branches/JBoss_3_2_7_CP/console/src/main/org/jboss/console/manager/DeploymentFileRepositoryMBean.java
Log:
ASPATCH-128: JBAS-3861: DeploymentFileRepository can be used to write/remove arbitrary files in the filesystem
Merged the fixes from Branch_4_2.
Modified: branches/JBoss_3_2_7_CP/console/src/main/org/jboss/console/manager/DeploymentFileRepository.java
===================================================================
--- branches/JBoss_3_2_7_CP/console/src/main/org/jboss/console/manager/DeploymentFileRepository.java 2006-12-01 16:59:27 UTC (rev 58809)
+++ branches/JBoss_3_2_7_CP/console/src/main/org/jboss/console/manager/DeploymentFileRepository.java 2006-12-01 19:20:44 UTC (rev 58810)
@@ -6,18 +6,18 @@
*/
package org.jboss.console.manager;
+import java.io.File;
+import java.io.FileOutputStream;
+import java.io.IOException;
+import java.io.PrintWriter;
+
+import javax.management.MBeanServer;
+import javax.management.ObjectName;
+
import org.jboss.system.ServiceMBeanSupport;
import org.jboss.system.server.ServerConfig;
import org.jboss.system.server.ServerConfigLocator;
-import javax.management.ObjectName;
-import javax.management.MBeanServer;
-import java.io.File;
-import java.io.FileOutputStream;
-import java.io.PrintWriter;
-import java.io.IOException;
-import java.net.URL;
-
/**
* This class wraps the file system
* for deployments. It gives a file-based
@@ -29,16 +29,17 @@
* corresponds to the base file name.
*
* @author <a href="mailto:bill at jboss.org">Bill Burke</a>
+ * @author <a href="mailto:dimitris at jboss.org">Dimitris Andreadis</a>
* @version $Revision$
- *
- **/
-public class DeploymentFileRepository extends ServiceMBeanSupport implements DeploymentFileRepositoryMBean
+ */
+public class DeploymentFileRepository extends ServiceMBeanSupport
+ implements DeploymentFileRepositoryMBean
{
private String baseDir;
private File base;
+
/** The server's home directory, for relative paths. */
protected File serverHome;
- protected URL serverHomeURL;
/**
*
@@ -52,9 +53,9 @@
public void store(String folder, String name, String fileExtension, String data, boolean noHotDeploy) throws IOException
{
System.out.println("store called");
- File dir = new File(base, folder);
- System.out.println("respository folder: " + dir.toString());
- System.out.println("absolute: " + dir.getAbsolutePath());
+ File dir = getFile(base, folder);
+ log.debug("repository folder: " + dir.toString());
+ log.debug("absolute: " + dir.getAbsolutePath());
if (!dir.exists())
{
if (!dir.mkdirs())
@@ -63,11 +64,13 @@
}
}
String filename = name.replace(' ', '_') + fileExtension;
- File file = new File(dir, filename);
+ File file = getFile(dir, filename);
+
File tmpfile = new File(dir, filename + ".tmp");
PrintWriter writer = new PrintWriter(new FileOutputStream(tmpfile));
writer.write(data);
writer.close();
+
if (file.exists() && noHotDeploy)
{
long modified = file.lastModified();
@@ -80,19 +83,19 @@
}
}
- public void remove(String folder, String name, String fileExtension)
+ public void remove(String folder, String name, String fileExtension) throws IOException
{
- File dir = new File(base, folder);
+ File dir = getFile(base, folder);
String filename = name.replace(' ', '_') + fileExtension;
- File file = new File(dir, filename);
+ File file = getFile(dir, filename);
file.delete();
}
- public boolean isStored(String folder, String name, String fileExtension)
+ public boolean isStored(String folder, String name, String fileExtension) throws IOException
{
- File dir = new File(base, folder);
+ File dir = getFile(base, folder);
String filename = name.replace(' ', '_') + fileExtension;
- File file = new File(dir, filename);
+ File file = getFile(dir, filename);
return file.exists();
}
@@ -101,15 +104,15 @@
return baseDir;
}
- public void setBaseDir(String baseDir)
+ public void setBaseDir(String baseDir) throws IOException
{
+ this.base = getFile(serverHome, baseDir);
this.baseDir = baseDir;
- this.base = new File(serverHome, baseDir);
+
+ log.debug("BaseDir set to: " + this.base);
}
-
- public ObjectName preRegister(MBeanServer server, ObjectName name)
- throws Exception
+ public ObjectName preRegister(MBeanServer server, ObjectName name) throws Exception
{
// get server's home for relative paths, need this for setting
// attribute final values, so we need to do it here
@@ -118,4 +121,20 @@
return super.preRegister(server, name);
}
+ /**
+ * Wrap the File(File parent, String child) CTOR to make sure the
+ * resulting child is indeed under the parent hierarchy,
+ * i.e. don't allow a ../../../rogue-child.txt
+ *
+ * see JBAS-3861
+ */
+ private File getFile(File parent, String child) throws IOException
+ {
+ File childFile = new File(parent, child);
+
+ if (childFile.getCanonicalPath().indexOf(parent.getCanonicalPath()) != 0)
+ throw new IllegalArgumentException("child '" + child + "' should be a child of parent '" + parent + "'");
+
+ return childFile;
+ }
}
Modified: branches/JBoss_3_2_7_CP/console/src/main/org/jboss/console/manager/DeploymentFileRepositoryMBean.java
===================================================================
--- branches/JBoss_3_2_7_CP/console/src/main/org/jboss/console/manager/DeploymentFileRepositoryMBean.java 2006-12-01 16:59:27 UTC (rev 58809)
+++ branches/JBoss_3_2_7_CP/console/src/main/org/jboss/console/manager/DeploymentFileRepositoryMBean.java 2006-12-01 19:20:44 UTC (rev 58810)
@@ -6,26 +6,31 @@
*/
package org.jboss.console.manager;
+import java.io.IOException;
+
import org.jboss.system.ServiceMBean;
-import java.io.IOException;
-
/**
- * Comment
+ * MBean interface
*
* @author <a href="mailto:bill at jboss.org">Bill Burke</a>
+ * @author <a href="mailto:dimitris at jboss.org">Dimitris Andreadis</a>
* @version $Revision$
- *
- **/
+ */
public interface DeploymentFileRepositoryMBean extends ServiceMBean
{
+ // Attributes ----------------------------------------------------
+
+ /** The base directory to use for storing/removing files */
+ void setBaseDir(String baseDir) throws IOException;
+ String getBaseDir();
+
+ // Operations ----------------------------------------------------
+
void store(String folder, String name, String fileExtension, String data, boolean noHotDeploy) throws IOException;
- void remove(String folder, String name, String fileExtension);
+ void remove(String folder, String name, String fileExtension) throws IOException;
- boolean isStored(String folder, String name, String fileExtension);
+ boolean isStored(String folder, String name, String fileExtension) throws IOException;
- String getBaseDir();
-
- void setBaseDir(String baseDir);
}
Copied: branches/JBoss_3_2_7_CP/testsuite/src/main/org/jboss/test/console (from rev 58725, branches/Branch_4_2/testsuite/src/main/org/jboss/test/console)
Copied: branches/JBoss_3_2_7_CP/testsuite/src/main/org/jboss/test/console/jbas3861 (from rev 58725, branches/Branch_4_2/testsuite/src/main/org/jboss/test/console/jbas3861)
Copied: branches/JBoss_3_2_7_CP/testsuite/src/main/org/jboss/test/console/jbas3861/JBAS3861UnitTestCase.java (from rev 58797, branches/Branch_4_2/testsuite/src/main/org/jboss/test/console/jbas3861/JBAS3861UnitTestCase.java)
More information about the jboss-cvs-commits
mailing list