7:21 a.m.
wiktorowski maximilien created AS7-5185:
-------------------------------------------
Summary: Wrong character table in Base64Utils
Key: AS7-5185
URL: https://issues.jboss.org/browse/AS7-5185
Project: Application Server 7
Issue Type: Feature Request
Components: Security
Affects Versions: 7.1.1.Final
Reporter: wiktorowski maximilien
Assignee: Anil Saldhana
In picketbox-4.0.7.Final.jar org.jboss.security.Base64Utils has a wrong character table
private static final char[] base64Table =
"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz./".toCharArray();
It should be
private static final char[] base64Table =
"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz+/".toCharArray();
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
7:23 a.m.
[
https://issues.jboss.org/browse/AS7-5185?page=com.atlassian.jira.plugin.s...
]
wiktorowski maximilien updated AS7-5185:
----------------------------------------
Issue Type: Bug (was: Feature Request)
Wrong character table in Base64Utils
------------------------------------
Key: AS7-5185
URL: https://issues.jboss.org/browse/AS7-5185
Project: Application Server 7
Issue Type: Bug
Components: Security
Affects Versions: 7.1.1.Final
Reporter: wiktorowski maximilien
Assignee: Anil Saldhana
In picketbox-4.0.7.Final.jar org.jboss.security.Base64Utils has a wrong character table
private static final char[] base64Table =
"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz./".toCharArray();
It should be
private static final char[] base64Table =
"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz+/".toCharArray();
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
2:35 p.m.
[
https://issues.jboss.org/browse/AS7-5185?page=com.atlassian.jira.plugin.s...
]
Anil Saldhana reassigned AS7-5185:
----------------------------------
Assignee: Stefan Guilhen (was: Anil Saldhana)
Need to get the latest version of the Base64 class.
Wrong character table in Base64Utils
------------------------------------
Key: AS7-5185
URL: https://issues.jboss.org/browse/AS7-5185
Project: Application Server 7
Issue Type: Bug
Components: Security
Affects Versions: 7.1.1.Final
Reporter: wiktorowski maximilien
Assignee: Stefan Guilhen
In picketbox-4.0.7.Final.jar org.jboss.security.Base64Utils has a wrong character table
private static final char[] base64Table =
"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz./".toCharArray();
It should be
private static final char[] base64Table =
"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz+/".toCharArray();
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
2:55 p.m.
New subject: [JBoss JIRA] (SECURITY-701) Wrong character table in Base64Utils
[
https://issues.jboss.org/browse/SECURITY-701?page=com.atlassian.jira.plug...
]
Stefan Guilhen moved AS7-5185 to SECURITY-701:
----------------------------------------------
Project: PicketBox (was: Application Server 7)
Key: SECURITY-701 (was: AS7-5185)
Workflow: jira (was: GIT Pull Request workflow )
Affects Version/s: PicketBox_4_0_12.Final
(was: 7.1.1.Final)
Component/s: JBossSX
(was: Security)
Security: Public
Wrong character table in Base64Utils
------------------------------------
Key: SECURITY-701
URL: https://issues.jboss.org/browse/SECURITY-701
Project: PicketBox
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: JBossSX
Affects Versions: PicketBox_4_0_12.Final
Reporter: wiktorowski maximilien
Assignee: Stefan Guilhen
In picketbox-4.0.7.Final.jar org.jboss.security.Base64Utils has a wrong character table
private static final char[] base64Table =
"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz./".toCharArray();
It should be
private static final char[] base64Table =
"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz+/".toCharArray();
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
2:57 p.m.
New subject: [JBoss JIRA] (SECURITY-701) Wrong character table in Base64Utils
[
https://issues.jboss.org/browse/SECURITY-701?page=com.atlassian.jira.plug...
]
Stefan Guilhen closed SECURITY-701.
-----------------------------------
Resolution: Done
This has been fixed in PicketBox and will be available in the next PicketBox release. The
App Server will be upgraded as soon as the release is ready.
Wrong character table in Base64Utils
------------------------------------
Key: SECURITY-701
URL: https://issues.jboss.org/browse/SECURITY-701
Project: PicketBox
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: JBossSX
Affects Versions: PicketBox_4_0_12.Final
Reporter: wiktorowski maximilien
Assignee: Stefan Guilhen
In picketbox-4.0.7.Final.jar org.jboss.security.Base64Utils has a wrong character table
private static final char[] base64Table =
"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz./".toCharArray();
It should be
private static final char[] base64Table =
"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz+/".toCharArray();
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
2:57 p.m.
New subject: [JBoss JIRA] (SECURITY-701) Wrong character table in Base64Utils
[
https://issues.jboss.org/browse/SECURITY-701?page=com.atlassian.jira.plug...
]
David Lloyd commented on SECURITY-701:
--------------------------------------
Just a heads-up - there are actually many slightly variant base64 schemes. You should be
sure you're not fixing one use case while breaking another.
Wrong character table in Base64Utils
------------------------------------
Key: SECURITY-701
URL: https://issues.jboss.org/browse/SECURITY-701
Project: PicketBox
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: JBossSX
Affects Versions: PicketBox_4_0_12.Final
Reporter: wiktorowski maximilien
Assignee: Stefan Guilhen
In picketbox-4.0.7.Final.jar org.jboss.security.Base64Utils has a wrong character table
private static final char[] base64Table =
"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz./".toCharArray();
It should be
private static final char[] base64Table =
"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz+/".toCharArray();
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
2:57 p.m.
New subject: [JBoss JIRA] (SECURITY-701) Wrong character table in Base64Utils
[
https://issues.jboss.org/browse/SECURITY-701?page=com.atlassian.jira.plug...
]
David Lloyd commented on SECURITY-701:
--------------------------------------
This base64 impl is about to be pulled into jdk8:
http://cr.openjdk.java.net/~sherman/4235519/webrev/jdk8.patch
Wrong character table in Base64Utils
------------------------------------
Key: SECURITY-701
URL: https://issues.jboss.org/browse/SECURITY-701
Project: PicketBox
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: JBossSX
Affects Versions: PicketBox_4_0_12.Final
Reporter: wiktorowski maximilien
Assignee: Stefan Guilhen
In picketbox-4.0.7.Final.jar org.jboss.security.Base64Utils has a wrong character table
private static final char[] base64Table =
"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz./".toCharArray();
It should be
private static final char[] base64Table =
"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz+/".toCharArray();
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
5:17 p.m.
New subject: [JBoss JIRA] (SECURITY-701) Wrong character table in Base64Utils
[
https://issues.jboss.org/browse/SECURITY-701?page=com.atlassian.jira.plug...
]
Stefan Guilhen reopened SECURITY-701:
-------------------------------------
After reading David's comment, I'm reverting my initial fix. We need to consider
the different schemes and this will require a more detailed analysis of the current usage
of Base64Utils.
Wrong character table in Base64Utils
------------------------------------
Key: SECURITY-701
URL: https://issues.jboss.org/browse/SECURITY-701
Project: PicketBox
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: JBossSX
Affects Versions: PicketBox_4_0_12.Final
Reporter: wiktorowski maximilien
Assignee: Stefan Guilhen
In picketbox-4.0.7.Final.jar org.jboss.security.Base64Utils has a wrong character table
private static final char[] base64Table =
"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz./".toCharArray();
It should be
private static final char[] base64Table =
"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz+/".toCharArray();
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
8:59 a.m.
New subject: [JBoss JIRA] (SECURITY-701) Wrong character table in Base64Utils
[
https://issues.jboss.org/browse/SECURITY-701?page=com.atlassian.jira.plug...
]
Anil Saldhana commented on SECURITY-701:
----------------------------------------
JDK8 will arrive in months/2-years. So we will have to get rid of Base64 classes anyway
then (similar to oswego -> JDK concurrent). Until then, just get the latest version of
the Base64 class like you did.
Wrong character table in Base64Utils
------------------------------------
Key: SECURITY-701
URL: https://issues.jboss.org/browse/SECURITY-701
Project: PicketBox
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: JBossSX
Affects Versions: PicketBox_4_0_12.Final
Reporter: wiktorowski maximilien
Assignee: Stefan Guilhen
In picketbox-4.0.7.Final.jar org.jboss.security.Base64Utils has a wrong character table
private static final char[] base64Table =
"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz./".toCharArray();
It should be
private static final char[] base64Table =
"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz+/".toCharArray();
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
5029
days inactive
5122
days old
8 comments
4 participants
participants (4)
-
Anil Saldhana (JIRA) -
David Lloyd (JIRA)
-
Stefan Guilhen (JIRA)
-
wiktorowski maximilien (JIRA)