Re: [Exist-development] Security problem in trunk with Ant tasks....

[Dmitriy S. <sha...@gm...>]

The fix is committed
http://exist.svn.sourceforge.net/exist/?rev=14329&view=rev

On Thu, Apr 28, 2011 at 8:00 PM, Andrzej Jan Taramina
<an...@ch...>wrote:

> Dmitriy:
>
> > I did commit a fix
> http://exist.svn.sourceforge.net/exist/?rev=14325&view=rev
> > <http://exist.svn.sourceforge.net/exist/?rev=14325&view=rev>
>
> There is another NPE problem if you use the store ant task with the
> createcollection attribute set
> to true:
>
> <exist:store uri="${exist.url}/xmlrpc/db/system/config/db/mycollection"
> createcollection="true"
> user="${userid}" password="${password}">
>                        <fileset dir="${src.index}">
>                                <include name="collection.xconf"/>
>                        </fileset>
>                </exist:store>
>
> If the collection specified in the URI exists already then I get an NPE:
>
> /home/andrzej/build.xml:1483: XMLDB exception caught: Failed to invoke
> method describeCollection in
> class org.exist.xmlrpc.RpcConnection: java.lang.NullPointerException
>
> and the stack trace cause is:
>
> 28 Apr 2011 10:51:24,894 ["http-bio-/127.0.0.1-80"-exec-1] ERROR
> (XmlRpcErrorLogger.java [log]:36) -
> Failed to invoke method describeCollection in class
> org.exist.xmlrpc.RpcConnection:
> java.lang.NullPointerException
> org.apache.xmlrpc.common.XmlRpcInvocationException: Failed to invoke method
> describeCollection in
> class org.exist.xmlrpc.RpcConnection: java.lang.NullPointerException
> .....
> Caused by: java.lang.NullPointerException
>         at
> org.exist.xmlrpc.RpcConnection.describeCollection(RpcConnection.java:727)
>        at
> org.exist.xmlrpc.RpcConnection.describeCollection(RpcConnection.java:695)
>        ... 44 more
>
> Seems there is still an issue in there somewhere!
>
> > BTW, do 'userid' registered at db?
>
> Yes! ${userid} is substituted for the real DBA userid by ant during the
> build. Everything we do
> tends to be parametrized to allow us to deploy to different production
> sites easily.
>


-- 
Dmitriy Shabanov