PK90848: LDAP ACCEPTS INVALID URIS LEADING TO UNEXPECTED EXCEPTIONS

APAR status

• Closed as program error.

Error description

• Error Message: LDAP test throws unexpected NumberFormatException
  when given certain server URLs, for example:
  env.put(LdapContext.PROVIDER_URL, "ldap://test.com:389\t");
  .
  Stack Trace: N/A
  .
  

Local fix

• Catch NumberFormatException and treat it as if a
  MalformedURLException had been thrown.
  

Problem summary

• The com.sun.jndi.ldap package uses com.sun.jndi.toolkit.url.Uri
  to encapsulate LDAP server addresses.  This Uri class has
  validation that is inferior to java.net.URI and thus accepts
  some types of invalid URI, which lead to unnexpected
  RuntimeExceptions being thrown (for example,
  NumberFormatException when the port contains a non-numeric
  character).
  

Problem conclusion

• This defect will be fixed in:
  1.4.2 SR13 FP1
  .
  Changed the implementation of com.sun.jndi.toolkit.url.Uri to
  throw a MalformedURLException if parsing the port section would
  have thrown a NumberFormatException.
  .
  To obtain the fix:
  Install build 20090614 or later
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA(1.3/1.4 CO

• Fixed component ID

  5648C9800

Applicable component levels

• R42A PSN

     UP

• R42L PSN

     UP

• R42W PSN

     UP

• R420 PSN

     UP