October 2010 - jboss-jira - Jboss List Archives

[JBoss JIRA] Created: (JBCOMMON-108) CVE-2009-2693

by Mike Millson (JIRA)

CVE-2009-2693 ------------- Key: JBCOMMON-108 URL: https://jira.jboss.org/jira/browse/JBCOMMON-108 Project: JBoss Common Issue Type: Bug Security Level: Public (Everyone can see) Components: common-old (1.x) Affects Versions: 1.2.1.GA, 1.0.0.GA Reporter: Mike Millson CVE-2009-2693: When deploying WAR files, the WAR files were not checked for directory traversal attempts. This allows an attacker to create arbitrary content outside of the web root by including entries such as ../../bin/catalina.sh in the WAR. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 2 months

2
3
0 / 0

[JBoss JIRA] Created: (EJBTHREE-983) @EJB injection fails, RuntimeException, IllegalArgumentException

by dpocock (JIRA)

@EJB injection fails, RuntimeException, IllegalArgumentException ---------------------------------------------------------------- Key: EJBTHREE-983 URL: http://jira.jboss.com/jira/browse/EJBTHREE-983 Project: EJB 3.0 Issue Type: Bug Components: EJB3 Extensions Affects Versions: AS 4.2.0 GA, EJB 3.0 RC9 - Patch 1 Environment: Debian Linux, Sun Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_12-b04) Reporter: dpocock Similar to bug EJBTHREE-862. However, setting `Isolated' to false in $JBOSS_HOME/server/XXX/deploy/ear-deployer.xml does not resolve the issue for me. Here is the scenario: There are two applications, app1.ear and app2.ear. app1.ear contains a stateless session bean, App1Bean, with local and remote interface app2.ear contains a stateless session bean, App2Bean, which has a field defined like so: @EJB(mappedName="app1/App1Bean/local") // I've tried local and remote com.app1.ejb.session.App1 app1; app1.ear and app2.ear are loaded successfully by the application server. When App2Bean is activated, JBoss tries to perform the injections. At this point, the RuntimeException (see stack below) occurs. App2Bean can successfully obtain a reference to app1 bean using the traditional JNDI lookup methods. This is a workaround. When inspecting the stack, notice the presence of IllegalArgumentException, even though the interface matches. 16:22:12,155 ERROR [STDERR] java.lang.RuntimeException: Non matching type for inject of field: App1Bean app1 for type: $Proxy79 of jndiName env/App2Bean/app2 intfs: , App1, org.jboss.ejb3.JBossProxy, javax.ejb.EJBObject 16:22:12,155 ERROR [STDERR] at org.jboss.injection.JndiFieldInjector.inject(JndiFieldInjector.java:135) 16:22:12,155 ERROR [STDERR] at org.jboss.injection.JndiFieldInjector.inject(JndiFieldInjector.java:104) 16:22:12,155 ERROR [STDERR] at org.jboss.injection.JndiFieldInjector.inject(JndiFieldInjector.java:61) 16:22:12,155 ERROR [STDERR] at org.jboss.ejb3.AbstractPool.create(AbstractPool.java:92) 16:22:12,155 ERROR [STDERR] at org.jboss.ejb3.ThreadlocalPool.get(ThreadlocalPool.java:48) 16:22:12,165 ERROR [STDERR] at org.jboss.ejb3.cache.simple.SimpleStatefulCache.create(SimpleStatefulCache.java:209) 16:22:12,165 ERROR [STDERR] at org.jboss.ejb3.stateful.StatefulContainer.dynamicInvoke(StatefulContainer.java:303) 16:22:12,165 ERROR [STDERR] at org.jboss.aop.Dispatcher.invoke(Dispatcher.java:106) 16:22:12,165 ERROR [STDERR] at org.jboss.aspects.remoting.AOPRemotingInvocationHandler.invoke(AOPRemotingInvocationHandler.java:82) 16:22:12,175 ERROR [STDERR] at org.jboss.remoting.ServerInvoker.invoke(ServerInvoker.java:828) 16:22:12,175 ERROR [STDERR] at org.jboss.remoting.ServerInvoker.invoke(ServerInvoker.java:681) 16:22:12,175 ERROR [STDERR] at org.jboss.remoting.transport.socket.ServerThread.processInvocation(ServerThread.java:358) 16:22:12,175 ERROR [STDERR] at org.jboss.remoting.transport.socket.ServerThread.dorun(ServerThread.java:412) 16:22:12,175 ERROR [STDERR] at org.jboss.remoting.transport.socket.ServerThread.run(ServerThread.java:239) 16:22:12,185 ERROR [STDERR] Caused by: java.lang.IllegalArgumentException 16:22:12,185 ERROR [STDERR] at sun.reflect.UnsafeObjectFieldAccessorImpl.set(UnsafeObjectFieldAccessorImpl.java:63) 16:22:12,185 ERROR [STDERR] at java.lang.reflect.Field.set(Field.java:656) 16:22:12,185 ERROR [STDERR] at org.jboss.injection.JndiFieldInjector.inject(JndiFieldInjector.java:119) 16:22:12,185 ERROR [STDERR] ... 13 more -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 2 months

5
5
0 / 0

[JBoss JIRA] Resolved: (JBAS-8304) Use shared library mode in JBoss AS

by Marius Bogoevici (JIRA)

[ https://jira.jboss.org/browse/JBAS-8304?page=com.atlassian.jira.plugin.sy... ] Marius Bogoevici resolved JBAS-8304. ------------------------------------ Resolution: Done > Use shared library mode in JBoss AS > ----------------------------------- > > Key: JBAS-8304 > URL: https://jira.jboss.org/browse/JBAS-8304 > Project: JBoss Application Server > Issue Type: Feature Request > Components: Weld/CDI > Reporter: Pete Muir > Assignee: Marius Bogoevici > Priority: Critical > Fix For: 6.0.0.CR1 > > -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 2 months

1
0
0 / 0

[JBoss JIRA] Created: (EJBTHREE-2170) no-interface view doesn't pass on the invoked business interface to Endpoint

by jaikiran pai (JIRA)

no-interface view doesn't pass on the invoked business interface to Endpoint ---------------------------------------------------------------------------- Key: EJBTHREE-2170 URL: https://jira.jboss.org/browse/EJBTHREE-2170 Project: EJB 3.0 Issue Type: Bug Components: nointerface Affects Versions: depchain-1.0.0-alpha-4 Reporter: jaikiran pai Assignee: jaikiran pai The NoInterfaceViewInvocationHandler passes null as the invoked business interface to the Endpoint: // finally pass-on the control to the endpoint return endpoint.invoke(this.session, null, method, args); Instead, it should be passing the no-interface view type http://download.oracle.com/javaee/6/api/javax/ejb/SessionContext.html#get... -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 2 months

1
1
0 / 0

[JBoss JIRA] Created: (JBPORTAL-2485) Search on the page Editor

by Jim Tyrrell (JIRA)

Search on the page Editor ------------------------- Key: JBPORTAL-2485 URL: https://jira.jboss.org/browse/JBPORTAL-2485 Project: JBoss Portal Issue Type: Feature Request Security Level: Public (Everyone can see) Environment: All Reporter: Jim Tyrrell Attachments: Screen shot 2010-10-12 at 9.13.06 AM.png It would be nice if the Page Editor had a box in it to do a search to bring up only the items matching the string instead of having to hunt through each of the various buckets that hold portlets. As more and more things get added this list would become huge. See the attached screen shot to see what dialogue I am talking about. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 2 months

1
1
0 / 0

[JBoss JIRA] Created: (JBAS-8448) Update parsing code to generate domain updates instead of models directly

by Jason Greene (JIRA)

Update parsing code to generate domain updates instead of models directly ------------------------------------------------------------------------- Key: JBAS-8448 URL: https://jira.jboss.org/browse/JBAS-8448 Project: JBoss Application Server Issue Type: Task Security Level: Public (Everyone can see) Reporter: Jason Greene -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 2 months

2
4
0 / 0

[JBoss JIRA] Created: (JBRULES-2731) Guvnor web guided decision table: sorting on integer and date fields should sort correctly

by Geoffrey De Smet (JIRA)

Guvnor web guided decision table: sorting on integer and date fields should sort correctly ------------------------------------------------------------------------------------------ Key: JBRULES-2731 URL: https://jira.jboss.org/browse/JBRULES-2731 Project: Drools Issue Type: Bug Security Level: Public (Everyone can see) Components: drools-guvnor Affects Versions: 5.1.1.FINAL Reporter: Geoffrey De Smet Assignee: Geoffrey De Smet Priority: Minor Fix For: FUTURE the row number apparently sorts correctly, but the others don't Problem is because org.drools.ide.common.client.modeldriven.dt.GuidedDecisionTable#data is a String[][] -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 2 months

1
0
0 / 0

[JBoss JIRA] Created: (JBJCA-440) NoClassDefFoundError in ironjacamar-validator-maven

by Jürgen Schiewe (JIRA)

NoClassDefFoundError in ironjacamar-validator-maven --------------------------------------------------- Key: JBJCA-440 URL: https://jira.jboss.org/browse/JBJCA-440 Project: IronJacamar Issue Type: Bug Components: Validator Affects Versions: 1.0.0.Beta2 Reporter: Jürgen Schiewe Assignee: Jesper Pedersen The maven validator plugin fails with an exception: [INFO] Building jar: D:\Projects\iocc-rule\rule-rar\target\rule-rar-1.0.2-SNAPSH OT.rar [INFO] [ironjacamar:validate {execution: default}] java.lang.NoClassDefFoundError: org/jboss/jca/common/api/metadata/common/CommonPool at org.jboss.jca.common.metadata.MetadataFactory.getStandardMetaData(MetadataFactory.java:74) at org.jboss.jca.validator.Validation.validate(Validation.java:143) at org.jboss.jca.validator.maven.ValidatorMojo.execute(ValidatorMojo.java:72) at org.apache.maven.plugin.DefaultPluginManager.executeMojo(DefaultPluginManager.java:451) at org.apache.maven.lifecycle.DefaultLifecycleExecutor.executeGoals(DefaultLifecycleExecutor.java:558) at org.apache.maven.lifecycle.DefaultLifecycleExecutor.executeGoalWithLifecycle(DefaultLifecycleExecutor.java:499) at org.apache.maven.lifecycle.DefaultLifecycleExecutor.executeGoal(DefaultLifecycleExecutor.java:478) at org.apache.maven.lifecycle.DefaultLifecycleExecutor.executeGoalAndHandleFailures(DefaultLifecycleExecutor.java:330) at org.apache.maven.lifecycle.DefaultLifecycleExecutor.executeTaskSegments(DefaultLifecycleExecutor.java:291) at org.apache.maven.lifecycle.DefaultLifecycleExecutor.execute(DefaultLifecycleExecutor.java:142) at org.apache.maven.DefaultMaven.doExecute(DefaultMaven.java:336) at org.apache.maven.DefaultMaven.execute(DefaultMaven.java:129) at org.apache.maven.cli.MavenCli.main(MavenCli.java:287) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at org.codehaus.classworlds.Launcher.launchEnhanced(Launcher.java:315) at org.codehaus.classworlds.Launcher.launch(Launcher.java:255) at org.codehaus.classworlds.Launcher.mainWithExitCode(Launcher.java:430) at org.codehaus.classworlds.Launcher.main(Launcher.java:375) Caused by: java.lang.ClassNotFoundException: org.jboss.jca.common.api.metadata.common.CommonPool at java.net.URLClassLoader$1.run(URLClassLoader.java:202) at java.security.AccessController.doPrivileged(Native Method) at java.net.URLClassLoader.findClass(URLClassLoader.java:190) at java.lang.ClassLoader.loadClass(ClassLoader.java:307) at org.codehaus.classworlds.RealmClassLoader.loadClassDirect(RealmClassLoader.java:195) at org.codehaus.classworlds.DefaultClassRealm.loadClass(DefaultClassRealm.java:255) at org.codehaus.classworlds.DefaultClassRealm.loadClass(DefaultClassRealm.java:274) at org.codehaus.classworlds.RealmClassLoader.loadClass(RealmClassLoader.java:214) at java.lang.ClassLoader.loadClass(ClassLoader.java:248) ... 21 more -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 2 months

2
2
0 / 0

[JBoss JIRA] Created: (JBPORTAL-2484) gmail gadget does not work

by Jim Tyrrell (JIRA)

gmail gadget does not work -------------------------- Key: JBPORTAL-2484 URL: https://jira.jboss.org/browse/JBPORTAL-2484 Project: JBoss Portal Issue Type: Feature Request Security Level: Public (Everyone can see) Environment: EPP 5.0.1 when trying to add a gmail gadget Reporter: Jim Tyrrell Try to add this URL: http://www.afila.es/gmail.xml&up_gadget_height=400&synd=open&... Says it is not valid. Try to add this one: http://www.afila.es/gmail.xml I do not get a good view of the gadget until I maximize it. When maximized can not set the gadget height and have it respected. When typing in a valid username and password I never get logged in. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 2 months

1
0
0 / 0

[JBoss JIRA] Created: (JBJCA-439) incomplete classpath in validator.bat

by JÃ¼rgen Schiewe (JIRA)

incomplete classpath in validator.bat ------------------------------------- Key: JBJCA-439 URL: https://jira.jboss.org/browse/JBJCA-439 Project: IronJacamar Issue Type: Bug Components: Validator Affects Versions: 1.0.0.Beta2 Environment: Microsoft Windows XP [Version 5.1.2600] Reporter: JÃ¼rgen Schiewe Assignee: Jesper Pedersen The classpaths in validator.bat is incomplete. the paths are ..\..\<lib name> and should be ..\..\lib\<lib name> instead ironjacamar-common-spi.jar is missing jboss-logging.jar is missing -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 2 months

2
2
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira October 2010