PK90848: LDAP ACCEPTS INVALID URIS LEADING TO UNEXPECTED EXCEPTIONS

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • Error Message: LDAP test throws unexpected NumberFormatException
    when given certain server URLs, for example:
    env.put(LdapContext.PROVIDER_URL, "ldap://test.com:389\t");
    .
    Stack Trace: N/A
    .
    

Local fix

  • Catch NumberFormatException and treat it as if a
    MalformedURLException had been thrown.
    

Problem summary

  • The com.sun.jndi.ldap package uses com.sun.jndi.toolkit.url.Uri
    to encapsulate LDAP server addresses.  This Uri class has
    validation that is inferior to java.net.URI and thus accepts
    some types of invalid URI, which lead to unnexpected
    RuntimeExceptions being thrown (for example,
    NumberFormatException when the port contains a non-numeric
    character).
    

Problem conclusion

  • This defect will be fixed in:
    1.4.2 SR13 FP1
    .
    Changed the implementation of com.sun.jndi.toolkit.url.Uri to
    throw a MalformedURLException if parsing the port section would
    have thrown a NumberFormatException.
    .
    To obtain the fix:
    Install build 20090614 or later
    

Temporary fix

Comments

APAR Information

  • APAR number

    PK90848

  • Reported component name

    JAVA(1.3/1.4 CO

  • Reported component ID

    5648C9800

  • Reported release

    42A

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2009-07-08

  • Closed date

    2009-07-08

  • Last modified date

    2009-07-08

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    JAVA(1.3/1.4 CO

  • Fixed component ID

    5648C9800

Applicable component levels

  • R42A PSN

       UP

  • R42L PSN

       UP

  • R42W PSN

       UP

  • R420 PSN

       UP



Rate this page:

(0 users)Average rating

Add comments

Document information


More support for:

z/OS family

Software version:

1.4.2

Reference #:

PK90848

Modified date:

2009-07-08

Translate my page

Machine Translation

Content navigation