Re: [Exist-development] Security problem in trunk with Ant tasks....

[Andrzej J. T. <an...@ch...>]

Dmitriy:

> The fix is committed http://exist.svn.sourceforge.net/exist/?rev=14329&view=rev
> <http://exist.svn.sourceforge.net/exist/?rev=14329&view=rev>

Muchos gracias...that fixed the issue!

....A

> On Thu, Apr 28, 2011 at 8:00 PM, Andrzej Jan Taramina <an...@ch...
> <mailto:an...@ch...>> wrote:
> 
>     Dmitriy:
> 
>     > I did commit a fix http://exist.svn.sourceforge.net/exist/?rev=14325&view=rev
>     <http://exist.svn.sourceforge.net/exist/?rev=14325&view=rev>
>     > <http://exist.svn.sourceforge.net/exist/?rev=14325&view=rev
>     <http://exist.svn.sourceforge.net/exist/?rev=14325&view=rev>>
> 
>     There is another NPE problem if you use the store ant task with the createcollection attribute set
>     to true:
> 
>     <exist:store uri="${exist.url}/xmlrpc/db/system/config/db/mycollection" createcollection="true"
>     user="${userid}" password="${password}">
>                            <fileset dir="${src.index}">
>                                    <include name="collection.xconf"/>
>                            </fileset>
>                    </exist:store>
> 
>     If the collection specified in the URI exists already then I get an NPE:
> 
>     /home/andrzej/build.xml:1483: XMLDB exception caught: Failed to invoke method describeCollection in
>     class org.exist.xmlrpc.RpcConnection: java.lang.NullPointerException
> 
>     and the stack trace cause is:
> 
>     28 Apr 2011 10:51:24,894 ["http-bio-/127.0.0.1-80"-exec-1] ERROR (XmlRpcErrorLogger.java [log]:36) -
>     Failed to invoke method describeCollection in class org.exist.xmlrpc.RpcConnection:
>     java.lang.NullPointerException
>     org.apache.xmlrpc.common.XmlRpcInvocationException: Failed to invoke method describeCollection in
>     class org.exist.xmlrpc.RpcConnection: java.lang.NullPointerException
>     .....
>     Caused by: java.lang.NullPointerException
>            at org.exist.xmlrpc.RpcConnection.describeCollection(RpcConnection.java:727)
>            at org.exist.xmlrpc.RpcConnection.describeCollection(RpcConnection.java:695)
>            ... 44 more
> 
>     Seems there is still an issue in there somewhere!
> 
>     > BTW, do 'userid' registered at db?
> 
>     Yes! ${userid} is substituted for the real DBA userid by ant during the build. Everything we do
>     tends to be parametrized to allow us to deploy to different production sites easily.
> 
> 
> 
> -- 
> Dmitriy Shabanov


-- 
Andrzej Taramina
Chaeron Corporation: Enterprise System Solutions
http://www.chaeron.com