Re: [Exist-development] Security problem in trunk with Ant tasks....

[Andrzej J. T. <an...@ch...>]

Dmitriy:

> I did commit a fix http://exist.svn.sourceforge.net/exist/?rev=14325&view=rev
> <http://exist.svn.sourceforge.net/exist/?rev=14325&view=rev>

There is another NPE problem if you use the store ant task with the createcollection attribute set
to true:

<exist:store uri="${exist.url}/xmlrpc/db/system/config/db/mycollection" createcollection="true"
user="${userid}" password="${password}">
			<fileset dir="${src.index}">
				<include name="collection.xconf"/>
			</fileset>
		</exist:store>

If the collection specified in the URI exists already then I get an NPE:

/home/andrzej/build.xml:1483: XMLDB exception caught: Failed to invoke method describeCollection in
class org.exist.xmlrpc.RpcConnection: java.lang.NullPointerException

and the stack trace cause is:

28 Apr 2011 10:51:24,894 ["http-bio-/127.0.0.1-80"-exec-1] ERROR (XmlRpcErrorLogger.java [log]:36) -
Failed to invoke method describeCollection in class org.exist.xmlrpc.RpcConnection:
java.lang.NullPointerException
org.apache.xmlrpc.common.XmlRpcInvocationException: Failed to invoke method describeCollection in
class org.exist.xmlrpc.RpcConnection: java.lang.NullPointerException
.....
Caused by: java.lang.NullPointerException
	at org.exist.xmlrpc.RpcConnection.describeCollection(RpcConnection.java:727)
	at org.exist.xmlrpc.RpcConnection.describeCollection(RpcConnection.java:695)
	... 44 more

Seems there is still an issue in there somewhere!

> BTW, do 'userid' registered at db?

Yes! ${userid} is substituted for the real DBA userid by ant during the build. Everything we do
tends to be parametrized to allow us to deploy to different production sites easily.

-- 
Andrzej Taramina
Chaeron Corporation: Enterprise System Solutions
http://www.chaeron.com