[jbosstools-issues] [JBoss JIRA] (JBDS-1898) Depending on keystroke sequence - it is possible to corrupt SOA-P server's Drools runtime from "Create new Drools Runtime" dialog

Len DiMaggio (Commented) (JIRA) jira-events at lists.jboss.org
Sat Oct 22 00:36:45 EDT 2011


    [ https://issues.jboss.org/browse/JBDS-1898?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12636639#comment-12636639 ] 

Len DiMaggio commented on JBDS-1898:
------------------------------------

There are actually (3) sequences:

If a user:
1) Clicks the "Create a New Runtime" button
2) Then selects a directory to contain the new runtime
3) The runtime jars are copied to the selected dir when the user clicks on "OK" in the dir selection dialog - potentially causing class conflicts with if that directory contains an existing runtime

If a user:
1) Selects a directory, and clicks on "OK" in the dir selection dialog
2) The clicks on "OK" in the create new runtime dialog
3) An attempt is made to register an existing runtime in the selected dir - no files are copied

But, if a user:
1) Selects a directory, and clicks on "OK" in the dir selection dialog
2) Then clicks the "Create a New Runtime" button
3) No new runtime is created, and no existing runtime is registered

                
> Depending on keystroke sequence - it is possible to corrupt SOA-P server's Drools runtime from "Create new Drools Runtime" dialog
> ---------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: JBDS-1898
>                 URL: https://issues.jboss.org/browse/JBDS-1898
>             Project: Developer Studio (JBoss Developer Studio)
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: SOA Platform
>    Affects Versions: 4.1.1.Final
>         Environment: Version: 4.1.1.CR1
> Build id: v20111018-0116-H1068-CR1
> Build date: 20111018-0116
>            Reporter: Len DiMaggio
>            Assignee: Brian Fitzpatrick
>             Fix For: 4.1.1.Final
>
>
> The exact set of key strokes is:
> 1. Navigate to installed drools runtime page
> 2. Click "Add"
> 3. Click "Create new Drools 5 Runtime"
> 4. Navigate to server's jbrules.esb (jboss-soa-p-5/jboss-as/server/<profile>)/deploy/jbrules.esb)
> 5. Click "Open"
> The SOA-P jbrules.esb dir will have community jars (these are the files without version numbers embedded in their names) written to it. See below:
> =================
> pwd
> /opt/local/52_ER5/jboss-soa-p-5/jboss-as/server/production/deploy/jbrules.esb
> BEFORE
> [ldimaggi at ldimaggi jbrules.esb]$ ll
> total 9304
> -rw-r--r--. 1 ldimaggi ldimaggi  465235 Oct 12 06:58 antlr-2.7.7.jar
> -rw-r--r--. 1 ldimaggi ldimaggi  923617 Oct 12 06:58 antlr-3.3.jar
> -rw-r--r--. 1 ldimaggi ldimaggi  175591 Oct 12 06:58 antlr-runtime-3.3.jar
> -rw-r--r--. 1 ldimaggi ldimaggi 1045247 Oct 12 06:45 drools-compiler-5.2.0.BRMS.jar
> -rw-r--r--. 1 ldimaggi ldimaggi 2115192 Oct 12 06:45 drools-core-5.2.0.BRMS.jar
> -rw-r--r--. 1 ldimaggi ldimaggi   62487 Oct 12 06:45 drools-decisiontables-5.2.0.BRMS.jar
> -rw-r--r--. 1 ldimaggi ldimaggi   34820 Oct 12 06:45 drools-jsr94-5.2.0.BRMS.jar
> -rw-r--r--. 1 ldimaggi ldimaggi   60441 Oct 12 06:45 drools-templates-5.2.0.BRMS.jar
> -rw-r--r--. 1 ldimaggi ldimaggi 1717966 Oct 12 06:58 ecj-3.5.1.jar
> -rw-r--r--. 1 ldimaggi ldimaggi   90563 Oct 11 10:36 jbossesb-jbrules.jar
> -rw-r--r--. 1 ldimaggi ldimaggi  341509 Oct 12 06:45 jbpm-flow-5.2.0.BRMS.jar
> -rw-r--r--. 1 ldimaggi ldimaggi  145022 Oct 12 06:45 jbpm-flow-builder-5.2.0.BRMS.jar
> -rw-r--r--. 1 ldimaggi ldimaggi     207 Oct 11 10:28 jbrules-service.xml
> -rw-r--r--. 1 ldimaggi ldimaggi   18263 Oct 12 06:58 jsr94-1.1.jar
> -rw-r--r--. 1 ldimaggi ldimaggi  787567 Oct 12 06:58 jxl-2.6.10.jar
> -rw-r--r--. 1 ldimaggi ldimaggi  185855 Oct 12 06:45 knowledge-api-5.2.0.BRMS.jar
> -rw-r--r--. 1 ldimaggi ldimaggi  391369 Oct 12 06:58 log4j-1.2.14.jar
> drwxr-xr-x. 2 ldimaggi ldimaggi    4096 Oct 11 10:28 META-INF
> -rw-r--r--. 1 ldimaggi ldimaggi  757233 Oct 12 06:45 mvel2-2.1.Beta6.jar
> -rw-r--r--. 1 ldimaggi ldimaggi  156620 Oct 12 06:58 stringtemplate-3.2.1.jar
> -rw-r--r--. 1 ldimaggi ldimaggi    2755 Oct 11 10:28 XPathLanguage.dsl
> AFTER
> [ldimaggi at ldimaggi jbrules.esb]$ ll
> total 20108
> -rw-r--r--. 1 ldimaggi ldimaggi  465235 Oct 12 06:58 antlr-2.7.7.jar
> -rw-r--r--. 1 ldimaggi ldimaggi  923617 Oct 12 06:58 antlr-3.3.jar
> -rw-r--r--. 1 ldimaggi ldimaggi  175591 Oct 12 06:58 antlr-runtime-3.3.jar
> -rw-rw-r--. 1 ldimaggi ldimaggi  163650 Oct 21 16:02 antlr-runtime.jar
> -rw-r--r--. 1 ldimaggi ldimaggi 1045247 Oct 12 06:45 drools-compiler-5.2.0.BRMS.jar
> -rw-rw-r--. 1 ldimaggi ldimaggi  996982 Oct 21 16:02 drools-compiler.jar
> -rw-r--r--. 1 ldimaggi ldimaggi 2115192 Oct 12 06:45 drools-core-5.2.0.BRMS.jar
> -rw-rw-r--. 1 ldimaggi ldimaggi 1990689 Oct 21 16:02 drools-core.jar
> -rw-r--r--. 1 ldimaggi ldimaggi   62487 Oct 12 06:45 drools-decisiontables-5.2.0.BRMS.jar
> -rw-rw-r--. 1 ldimaggi ldimaggi   56955 Oct 21 16:02 drools-decisiontables.jar
> -rw-rw-r--. 1 ldimaggi ldimaggi  269216 Oct 21 16:02 droolsjbpm-ide-common.jar
> -rw-r--r--. 1 ldimaggi ldimaggi   34820 Oct 12 06:45 drools-jsr94-5.2.0.BRMS.jar
> -rw-rw-r--. 1 ldimaggi ldimaggi   30196 Oct 21 16:02 drools-jsr94.jar
> -rw-r--r--. 1 ldimaggi ldimaggi   60441 Oct 12 06:45 drools-templates-5.2.0.BRMS.jar
> -rw-rw-r--. 1 ldimaggi ldimaggi   54101 Oct 21 16:02 drools-templates.jar
> -rw-r--r--. 1 ldimaggi ldimaggi 1717966 Oct 12 06:58 ecj-3.5.1.jar
> -rw-r--r--. 1 ldimaggi ldimaggi   90563 Oct 11 10:36 jbossesb-jbrules.jar
> -rw-rw-r--. 1 ldimaggi ldimaggi  169449 Oct 21 16:02 jbpm-bpmn2.jar
> -rw-r--r--. 1 ldimaggi ldimaggi  341509 Oct 12 06:45 jbpm-flow-5.2.0.BRMS.jar
> -rw-r--r--. 1 ldimaggi ldimaggi  145022 Oct 12 06:45 jbpm-flow-builder-5.2.0.BRMS.jar
> -rw-rw-r--. 1 ldimaggi ldimaggi  135300 Oct 21 16:02 jbpm-flow-builder.jar
> -rw-rw-r--. 1 ldimaggi ldimaggi  319258 Oct 21 16:02 jbpm-flow.jar
> -rw-r--r--. 1 ldimaggi ldimaggi     207 Oct 11 10:28 jbrules-service.xml
> -rw-r--r--. 1 ldimaggi ldimaggi   18263 Oct 12 06:58 jsr94-1.1.jar
> -rw-rw-r--. 1 ldimaggi ldimaggi   13749 Oct 21 16:02 jsr94.jar
> -rw-rw-r--. 1 ldimaggi ldimaggi  237047 Oct 21 16:02 junit.jar
> -rw-r--r--. 1 ldimaggi ldimaggi  787567 Oct 12 06:58 jxl-2.6.10.jar
> -rw-rw-r--. 1 ldimaggi ldimaggi  743361 Oct 21 16:02 jxl.jar
> -rw-r--r--. 1 ldimaggi ldimaggi  185855 Oct 12 06:45 knowledge-api-5.2.0.BRMS.jar
> -rw-rw-r--. 1 ldimaggi ldimaggi  161470 Oct 21 16:02 knowledge-api.jar
> -rw-r--r--. 1 ldimaggi ldimaggi  391369 Oct 12 06:58 log4j-1.2.14.jar
> drwxr-xr-x. 2 ldimaggi ldimaggi    4096 Oct 11 10:28 META-INF
> -rw-r--r--. 1 ldimaggi ldimaggi  757233 Oct 12 06:45 mvel2-2.1.Beta6.jar
> -rw-rw-r--. 1 ldimaggi ldimaggi  716133 Oct 21 16:02 mvel2.jar
> -rw-rw-r--. 1 ldimaggi ldimaggi 4513443 Oct 21 16:02 org.eclipse.jdt.core_3.6.2.v_A76_R36x.jar
> -rw-r--r--. 1 ldimaggi ldimaggi  156620 Oct 12 06:58 stringtemplate-3.2.1.jar
> -rw-r--r--. 1 ldimaggi ldimaggi    2755 Oct 11 10:28 XPathLanguage.dsl
> -rw-rw-r--. 1 ldimaggi ldimaggi   24956 Oct 21 16:02 xpp3_min.jar
> -rw-rw-r--. 1 ldimaggi ldimaggi  431406 Oct 21 16:02 xstream.jar

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        


More information about the jbosstools-issues mailing list