[JBoss JIRA] (JGRP-1861) NPE in FindSubgroupsTask
by Radim Vansa (JIRA)
[ https://issues.jboss.org/browse/JGRP-1861?page=com.atlassian.jira.plugin.... ]
Radim Vansa updated JGRP-1861:
------------------------------
Priority: Minor (was: Major)
> NPE in FindSubgroupsTask
> ------------------------
>
> Key: JGRP-1861
> URL: https://issues.jboss.org/browse/JGRP-1861
> Project: JGroups
> Issue Type: Bug
> Security Level: Public(Everyone can see)
> Affects Versions: 3.5
> Reporter: Radim Vansa
> Assignee: Bela Ban
> Priority: Minor
>
> With JGroups 3.5.0.Beta9, when the node is starting, I see several NPEs:
> {code}
> 04:07:19,396 ERROR [org.jgroups.protocols.MERGE2] (Timer-3,edg-perf01-29005) FindSubgroupsTask failed
> java.lang.NullPointerException
> at java.util.concurrent.ConcurrentHashMap.put(ConcurrentHashMap.java:1124)
> at org.jgroups.protocols.MERGE2$FindSubgroupsTask.fetchViews(MERGE2.java:430)
> at org.jgroups.protocols.MERGE2$FindSubgroupsTask._findAndNotify(MERGE2.java:376)
> at org.jgroups.protocols.MERGE2$FindSubgroupsTask.findAndNotify(MERGE2.java:361)
> at org.jgroups.protocols.MERGE2$1.run(MERGE2.java:266)
> at org.jgroups.util.TimeScheduler3$Task.run(TimeScheduler3.java:283)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
> at java.lang.Thread.run(Thread.java:744)
> {code}
> These are probably harmless, later the cluster forms correctly.
--
This message was sent by Atlassian JIRA
(v6.2.6#6264)
12 years
[JBoss JIRA] (JGRP-1861) NPE in FindSubgroupsTask
by Radim Vansa (JIRA)
Radim Vansa created JGRP-1861:
---------------------------------
Summary: NPE in FindSubgroupsTask
Key: JGRP-1861
URL: https://issues.jboss.org/browse/JGRP-1861
Project: JGroups
Issue Type: Bug
Security Level: Public (Everyone can see)
Affects Versions: 3.5
Reporter: Radim Vansa
Assignee: Bela Ban
With JGroups 3.5.0.Beta9, when the node is starting, I see several NPEs:
{code}
04:07:19,396 ERROR [org.jgroups.protocols.MERGE2] (Timer-3,edg-perf01-29005) FindSubgroupsTask failed
java.lang.NullPointerException
at java.util.concurrent.ConcurrentHashMap.put(ConcurrentHashMap.java:1124)
at org.jgroups.protocols.MERGE2$FindSubgroupsTask.fetchViews(MERGE2.java:430)
at org.jgroups.protocols.MERGE2$FindSubgroupsTask._findAndNotify(MERGE2.java:376)
at org.jgroups.protocols.MERGE2$FindSubgroupsTask.findAndNotify(MERGE2.java:361)
at org.jgroups.protocols.MERGE2$1.run(MERGE2.java:266)
at org.jgroups.util.TimeScheduler3$Task.run(TimeScheduler3.java:283)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:744)
{code}
These are probably harmless, later the cluster forms correctly.
--
This message was sent by Atlassian JIRA
(v6.2.6#6264)
12 years
[JBoss JIRA] (JGRP-1487) AUTH: X509Token Authentication is vulnerable to replay attacks
by Bela Ban (JIRA)
[ https://issues.jboss.org/browse/JGRP-1487?page=com.atlassian.jira.plugin.... ]
Bela Ban resolved JGRP-1487.
----------------------------
Resolution: Done
> AUTH: X509Token Authentication is vulnerable to replay attacks
> --------------------------------------------------------------
>
> Key: JGRP-1487
> URL: https://issues.jboss.org/browse/JGRP-1487
> Project: JGroups
> Issue Type: Bug
> Security Level: Public(Everyone can see)
> Affects Versions: 3.0.9
> Reporter: sreenivas chinimilli
> Assignee: Tristan Tarrant
> Fix For: 3.5
>
>
> In the implementation of X509Token Authentication
> The auth_value is enrypted with the certificate within the keystore and
> during verification encrypted auth value is decrypted with the private key
> compared against the orignial auth value.
> This implementation is prone to replay attacks, that is
> any user with out having any knowledge of the auth value can join the group
> by replaying the enrypted auth value captured in earlier sessions.
--
This message was sent by Atlassian JIRA
(v6.2.6#6264)
12 years
[JBoss JIRA] (WFCORE-20) Remove TransformationTarget.getExtensionRegistry
by Brian Stansberry (JIRA)
Brian Stansberry created WFCORE-20:
--------------------------------------
Summary: Remove TransformationTarget.getExtensionRegistry
Key: WFCORE-20
URL: https://issues.jboss.org/browse/WFCORE-20
Project: WildFly Core
Issue Type: Task
Security Level: Public (Everyone can see)
Components: Domain Management
Reporter: Brian Stansberry
Assignee: Brian Stansberry
Fix For: 1.0.0.Alpha4
TransformationTarget exposes the ExtensionRegistry. Since TransformationTarget is exposed to extensions via the transformers they register (via [Resource|Operation]TransformationContext) this leaks a class to extensions that isn't meant to be exposed outside the core.
The only use of this method in WildFly doesn't really need it.
--
This message was sent by Atlassian JIRA
(v6.2.6#6264)
12 years