Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE:Evergreen:11.1
libtcnative-1-0
apache-tomcat-CVE-2009-0783-2.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File apache-tomcat-CVE-2009-0783-2.patch of Package libtcnative-1-0
Index: apache-tomcat-6.0.18-src/java/org/apache/catalina/core/StandardContext.java =================================================================== --- apache-tomcat-6.0.18-src/java/org/apache/catalina/core/StandardContext.java.orig 2008-07-22 02:01:28.000000000 +0200 +++ apache-tomcat-6.0.18-src/java/org/apache/catalina/core/StandardContext.java 2009-06-10 13:40:11.320343401 +0200 @@ -4244,10 +4244,6 @@ ((Lifecycle) pipeline).start(); } - if(getProcessTlds()) { - processTlds(); - } - // Notify our interested LifecycleListeners lifecycle.fireLifecycleEvent(START_EVENT, null); @@ -4418,39 +4414,6 @@ //cacheContext(); } - /** - * Processes TLDs. - * - * @throws LifecycleException If an error occurs - */ - protected void processTlds() throws LifecycleException { - TldConfig tldConfig = new TldConfig(); - tldConfig.setContext(this); - - // (1) check if the attribute has been defined - // on the context element. - tldConfig.setTldValidation(tldValidation); - tldConfig.setTldNamespaceAware(tldNamespaceAware); - - // (2) if the attribute wasn't defined on the context - // try the host. - if (!tldValidation) { - tldConfig.setTldValidation - (((StandardHost) getParent()).getXmlValidation()); - } - - if (!tldNamespaceAware) { - tldConfig.setTldNamespaceAware - (((StandardHost) getParent()).getXmlNamespaceAware()); - } - - try { - tldConfig.execute(); - } catch (Exception ex) { - log.error("Error reading tld listeners " - + ex.toString(), ex); - } - } private void cacheContext() { try { @@ -5332,6 +5295,10 @@ return; } } + if (processTlds) { + this.addLifecycleListener(new TldConfig()); + } + super.init(); // Notify our interested LifecycleListeners Index: apache-tomcat-6.0.18-src/java/org/apache/catalina/startup/TldConfig.java =================================================================== --- apache-tomcat-6.0.18-src/java/org/apache/catalina/startup/TldConfig.java.orig 2008-07-22 02:01:29.000000000 +0200 +++ apache-tomcat-6.0.18-src/java/org/apache/catalina/startup/TldConfig.java 2009-06-10 13:40:11.324344090 +0200 @@ -48,20 +48,24 @@ import org.apache.catalina.Context; import org.apache.catalina.Globals; +import org.apache.catalina.Lifecycle; +import org.apache.catalina.LifecycleEvent; +import org.apache.catalina.LifecycleListener; import org.apache.catalina.core.StandardContext; +import org.apache.catalina.core.StandardHost; import org.apache.catalina.util.StringManager; import org.apache.tomcat.util.digester.Digester; import org.xml.sax.InputSource; /** - * Startup event listener for a <b>Context</b> that configures the properties - * of that Context, and the associated defined servlets. + * Startup event listener for a <b>Context</b> that configures application + * listeners configured in any TLD files. * * @author Craig R. McClanahan * @author Jean-Francois Arcand * @author Costin Manolache */ -public final class TldConfig { +public final class TldConfig implements LifecycleListener { // Names of JARs that are known not to contain any TLDs private static HashSet<String> noTldJars; @@ -393,20 +397,6 @@ } /** - * Create (if necessary) and return a Digester configured to process a tag - * library descriptor, looking for additional listener classes to be - * registered. - */ - private static Digester createTldDigester() { - - return DigesterFactory.newDigester(tldValidation, - tldNamespaceAware, - new TldRuleSet()); - - } - - - /** * Scan the JAR file at the specified resource path for TLDs in the * <code>META-INF</code> subdirectory, and scan each TLD for application * event listeners that need to be registered. @@ -508,10 +498,6 @@ private void tldScanStream(InputSource resourceStream) throws Exception { - if (tldDigester == null){ - tldDigester = createTldDigester(); - } - synchronized (tldDigester) { try { tldDigester.push(this); @@ -736,4 +722,51 @@ return jarPathMap; } + + public void lifecycleEvent(LifecycleEvent event) { + // Identify the context we are associated with + try { + context = (Context) event.getLifecycle(); + } catch (ClassCastException e) { + log.error(sm.getString("tldConfig.cce", event.getLifecycle()), e); + return; + } + + if (event.getType().equals(Lifecycle.INIT_EVENT)) { + init(); + } else if (event.getType().equals(Lifecycle.START_EVENT)) { + try { + execute(); + } catch (Exception e) { + log.error(sm.getString( + "tldConfig.execute", context.getPath()), e); + } + } // Ignore the other event types - nothing to do + } + + private void init() { + if (tldDigester == null){ + // (1) check if the attribute has been defined + // on the context element. + setTldValidation(context.getTldValidation()); + setTldNamespaceAware(context.getTldNamespaceAware()); + + // (2) if the attribute wasn't defined on the context + // try the host. + if (!tldValidation) { + setTldValidation( + ((StandardHost) context.getParent()).getXmlValidation()); + } + + if (!tldNamespaceAware) { + setTldNamespaceAware( + ((StandardHost) context.getParent()).getXmlNamespaceAware()); + } + + tldDigester = DigesterFactory.newDigester(tldValidation, + tldNamespaceAware, + new TldRuleSet()); + tldDigester.getParser(); + } + } } Index: apache-tomcat-6.0.18-src/java/org/apache/catalina/startup/LocalStrings.properties =================================================================== --- apache-tomcat-6.0.18-src/java/org/apache/catalina/startup/LocalStrings.properties.orig 2008-07-22 02:01:29.000000000 +0200 +++ apache-tomcat-6.0.18-src/java/org/apache/catalina/startup/LocalStrings.properties 2009-06-10 13:40:11.348343317 +0200 @@ -87,6 +87,8 @@ hostConfig.undeploy=Undeploying context [{0}] hostConfig.undeploy.error=Error undeploying web application at context path {0} hostConfig.undeploying=Undeploying deployed web applications +tldConfig.cce=Lifecycle event data object {0} is not a Context +tldConfig.execute=Error processing TLD files for context path {0} userConfig.database=Exception loading user database userConfig.deploy=Deploying web application for user {0} userConfig.deploying=Deploying user web applications
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor