IBM Support

IV60611: XML CANONICALIZATION DOES NOT WORK AS EXPECTED.

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

APAR status

  • Closed as program error.

Error description

  • Error Message: 1, Canonicalization should not remove namespace
    attribute xmlns.Expected:<my:NodeSetElement
    xmlns:my="mySchema">hello</my:NodeSetElement><my:NodeSetElement
    xmlns:my="mySchema">here goes
    trouble</my:NodeSetElement><my:NodeSetElement
    xmlns:my="mySchema"></my:NodeSetElement>but
    got:<my:NodeSetElement>hello</my:NodeSetElement><my:NodeSetEleme
    nt>here goes
    trouble</my:NodeSetElement><my:NodeSetElement></my:NodeSetElemen
    t>2, Canonicalization output does not match the sample output in
    C14N spec (http://www.w3.org/TR/xml-c14n, 3.3 Start and End
    Tags).
    .
    Stack Trace:
    .
    

Local fix

Problem summary

  • IBM's C14N implementation need improvement.
    

Problem conclusion

  • This APAR will be fixed in the following Java Releases:
       7 R1 SR1  FP1  (7.1.1.1)
       7    SR7  FP1  (7.0.7.1)
       6 R1 SR8  FP1  (6.1.8.1)
       6    SR16 FP1  (6.0.16.1)
    .
    Improved IBM's C14N implementation.The corresponding Austin
    defect is 115138.The corresponding Hursley defect is 201465.The
    corresponding RTC Problem Report is 57051.Platform affected: All
    platforms.JVMs affected: 6.0, 6.26, 7.0, 7.27.Jars affected:
    ibmxmlcrypto.jar. Build level is 20140515.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IV60611

  • Reported component name

    SECURITY

  • Reported component ID

    620700125

  • Reported release

    600

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2014-05-16

  • Closed date

    2014-05-20

  • Last modified date

    2014-07-17

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    SECURITY

  • Fixed component ID

    620700125

Applicable component levels

  • R600 PSY

       UP

  • R260 PSY

       UP



Document information

More support for: Runtimes for Java Technology
Security

Software version: 6.0

Reference #: IV60611

Modified date: 17 July 2014