[jira] [Updated] (JS2-1296) Password Generator Goes into Infinite Loop

"David Dyer (JIRA)" <[email protected]>
Newsgroups gmane.comp.jakarta.jetspeed.devel
Message-ID <JIRA.12714611.1400187050842.55177.1403802326303@arcas>
     [ https://issues.apache.org/jira/browse/JS2-1296?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David Dyer updated JS2-1296:
----------------------------

    Attachment: JS-1296.patch

Uploaded patch JS-1296.patch fixes this by 
A) allowing the configuration to define the character array used to generate the password to ensure hat they match the regEx pattern given to the validation bean.
B) In the case where mismatch occurs, a configurable maximum number of attempts will break the loop, log a warning and return the last generated password string unvalidated.

> Password Generator Goes into Infinite Loop
> ------------------------------------------
>
>                 Key: JS2-1296
>                 URL: https://issues.apache.org/jira/browse/JS2-1296
>             Project: Jetspeed 2
>          Issue Type: Bug
>    Affects Versions: 2.2.2
>            Reporter: David Sean Taylor
>            Assignee: David Sean Taylor
>             Fix For: 2.3.0
>
>         Attachments: JS-1296.patch
>
>
> If a bad regex is provided in security-spi-atn.xml, the password generator goes into an infinite loop. Fix this by putting a max retry constraint



--
This message was sent by Atlassian JIRA
(v6.2#6252)
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.