dev  

Messages by Thread

• [jira] [Commented] (DIRAPI-456) Uncaught IllegalArgumentException on unknown VLV result code Jira
• [jira] [Commented] (DIRAPI-460) ComplexDnParser silently discards trailing garbage after last RDN Jira
• [jira] [Commented] (DIRAPI-492) Restore the pool identity after a SASL bind on a pooled connection - #337 Jira
• [jira] [Commented] (DIRAPI-454) NPE decoding endTransaction response control with unregistered OID Jira
• [jira] [Resolved] (DIRAPI-449) Grammar transitions ignore TLV nesting, enabling filter-structure smuggling Jira
• [jira] [Commented] (DIRAPI-494) Only consider a bind as successful when the server returns SUCCESS Jira
• [jira] [Commented] (DIRAPI-464) Stored-credential bcrypt work factor drives unbounded CPU cost at bind Jira
• [jira] [Resolved] (DIRAPI-492) Restore the pool identity after a SASL bind on a pooled connection - #337 Jira
• [jira] [Commented] (DIRAPI-477) SASL layer length field lacks negative and short-read handling Jira
• [jira] [Commented] (DIRAPI-455) Uncaught IllegalArgumentException on out-of-range ppolicy error value Jira
• [jira] [Commented] (DIRAPI-446) StartTLS transition accepts plaintext LDAP PDUs injected before handshake Jira
• [jira] [Commented] (DIRAPI-493) Check the attribute type of an Ava built from the public Rdn constructors Jira
• [jira] [Created] (DIRAPI-489) Reject trailing chars after a numeric OID matching rule in FilterBuilder Jira
• [jira] [Closed] (DIRAPI-493) Check the attribute type of an Ava built from the public Rdn constructors Jira
• [PR] Add characterization tests for the LDIF parser (29% -> 70% line coverage) [directory-studio] via GitHub
• [jira] [Created] (DIRAPI-486) GeneralizedTime accepts arbitrary trailing garbage after fractional part Jira
• [jira] [Resolved] (DIRAPI-486) GeneralizedTime accepts arbitrary trailing garbage after fractional part Jira
• [jira] [Closed] (DIRAPI-486) GeneralizedTime accepts arbitrary trailing garbage after fractional part Jira
• [jira] [Updated] (DIRAPI-449) Grammar transitions ignore TLV nesting, enabling filter-structure smuggling Jira
  • [jira] [Updated] (DIRAPI-449) Grammar transitions ignore TLV nesting, enabling filter-structure smuggling Jira
• [jira] [Commented] (DIRAPI-473) authenticated flag set before client-side SASL verification completes Jira
• [jira] [Closed] (DIRAPI-487) parseOid/parseDescr index past end of input (SIOOBE) Jira
• [jira] [Closed] (DIRAPI-449) Grammar transitions ignore TLV nesting, enabling filter-structure smuggling Jira
• [jira] [Commented] (DIRAPI-484) Malformed stored credentials crash compareCredentials with unchecked exceptions Jira
• [jira] [Commented] (DIRAPI-474) Deprecated TLSv1 and TLSv1.1 enabled by default for LDAPS/StartTLS Jira
• [jira] [Created] (DIRAPI-492) Restore the pool identity after a SASL bind on a pooled connection - #337 Jira
• [jira] [Closed] (DIRAPI-485) Subtree refinement parser recurses without depth limit Jira
• [jira] [Commented] (DIRAPI-483) Programmatic Ava/Rdn constructors accept structural characters in attribute type Jira
• [jira] [Created] (DIRAPI-490) Never let an unchecked exception escape the OpenLdapSchemaParser - #335 Jira
• [jira] [Resolved] (DIRAPI-494) Only consider a bind as successful when the server returns SUCCESS Jira
• [PR] Fix SyncRepl parser hang on backslashes, tls_cacertdir parsing and value escaping [directory-studio] via GitHub
  • Re: [PR] Fix SyncRepl parser hang on backslashes, tls_cacertdir parsing and value escaping [directory-studio] via GitHub
  • Re: [PR] Fix SyncRepl parser hang on backslashes and tls_cacertdir parsing [directory-studio] via GitHub
• [jira] [Resolved] (DIRAPI-487) parseOid/parseDescr index past end of input (SIOOBE) Jira
• [PR] Run the plugins' JUnit 5 unit tests (surefire discovered none) [directory-studio] via GitHub
• [jira] [Commented] (DIRAPI-442) Unbounded DSML filter nesting causes StackOverflowError during parse Jira
• [ANNOUNCE] Apache LDAP API 2.1.9 released Emmanuel Lecharny
• [jira] [Commented] (DIRAPI-449) Grammar transitions ignore TLV nesting, enabling filter-structure smuggling Jira
• [jira] [Commented] (DIRAPI-465) Schema description escape scan reads past end of line Jira
• [jira] [Commented] (DIRAPI-463) Unrecognized password-scheme prefix silently falls back to plaintext comparison Jira
• [jira] [Commented] (DIRAPI-479) parseQuotedSafeUtf8 called on token instead of spec (SIOOBE Jira
• [jira] [Resolved] (DIRAPI-493) Check the attribute type of an Ava built from the public Rdn constructors Jira
• [jira] [Closed] (DIRAPI-494) Only consider a bind as successful when the server returns SUCCESS Jira
• [jira] [Created] (DIRAPI-494) Only consider a bind as successful when the server returns SUCCESS Jira
• [jira] [Created] (DIRAPI-493) Check the attribute type of an Ava built from the public Rdn constructors Jira
• [jira] [Commented] (DIRAPI-447) LdifAnonymizer emits original DN-valued attributes in change-add entries Jira
• [jira] [Closed] (DIRAPI-492) Restore the pool identity after a SASL bind on a pooled connection - #337 Jira
• [jira] [Commented] (DIRAPI-438) Unbounded filter-nesting recursion causes StackOverflowError at decode time Jira
• [jira] [Closed] (DIRAPI-488) Serialize.deserializeInt sign-extends bytes, corrupting stored lengths Jira
• [jira] [Commented] (DIRAPI-440) Dsmlv2Engine processes batch requests after its bind fails Jira
• [jira] [Created] (DIRAPI-491) Don't mask chars above the case tables in Strings upper/lower case methods Jira
• [jira] [Closed] (DIRAPI-491) Don't mask chars above the case tables in Strings upper/lower case methods Jira
• [jira] [Commented] (DIRAPI-441) Malformed base64 in DSML document throws uncaught IllegalArgumentException Jira
• [jira] [Commented] (DIRAPI-448) FilterBuilder concatenates attribute names and matching rules unvalidated Jira
• [jira] [Commented] (DIRAPI-445) GSSAPI bind silently replaces JVM-global JAAS and Kerberos configuration Jira
• [jira] [Commented] (DIRAPI-444) EntryCursorImpl.next() spins forever on IntermediateResponse Jira
• [jira] [Commented] (DIRAPI-443) Synchronous simple bind sends unauthenticated bind on empty password Jira
• [jira] [Commented] (DIRAPI-451) Encoder recurses once per filter sibling and per control, stack overflow Jira
• [jira] [Commented] (DIRAPI-453) ACIItem missing itemFirst/userFirst passes check() but NPEs parse() Jira
• [jira] [Commented] (DIRAPI-450) Zero-length control/extended values pass null into factory decodeValue, NPE Jira
• [jira] [Commented] (DIRAPI-452) Unbounded mutual recursion in ACI refinement parsing (StackOverflowError) Jira
• [jira] [Commented] (DIRAPI-457) Java deserialization of server-controlled extended-response payload Jira
• [jira] [Commented] (DIRAPI-458) FilterEncoder passes attacker hex escapes through unencoded Jira
• [jira] [Commented] (DIRAPI-462) Rdn.hashCode() always returns 0 due to variable shadowing Jira
• [jira] [Commented] (DIRAPI-459) FilterParser recurses without depth limit; StackOverflowError on nested filters Jira
• [jira] [Commented] (DIRAPI-461) Rdn.unescapeValue mis-decodes specials and silently drops invalid escapes Jira
• [jira] [Commented] (DIRAPI-467) Strings.toLowerCase(byte[]) crashes on non-ASCII attribute id from network Jira
• [jira] [Commented] (DIRAPI-466) Telephone-number syntax regex has catastrophic exponential backtracking Jira
• [jira] [Commented] (DIRAPI-469) BER indefinite-length octet 0x80 silently decoded as zero length Jira
• [jira] [Commented] (DIRAPI-468) Oid.fromBytes crashes and misdecodes multi-byte OID arcs Jira
• [jira] [Commented] (DIRAPI-472) Pooled connections keep previous borrower's bind identity with default factory Jira
• [jira] [Commented] (DIRAPI-476) Extended request value unconditionally cast to OpaqueExtendedRequest Jira
• [jira] [Commented] (DIRAPI-475) StartTLS detection tests hasControl() instead of the request OID Jira
• [jira] [Commented] (DIRAPI-471) TLV.getSize() integer overflow bypasses parent length-containment check Jira
• [jira] [Commented] (DIRAPI-470) 5-byte BER INTEGER in [2^31,2^32) silently wraps negative Jira
• [jira] [Commented] (DIRAPI-478) PasswordModifyResponse toString prints generated password in clear Jira
• [jira] [Commented] (DIRAPI-485) Subtree refinement parser recurses without depth limit Jira
• [jira] [Commented] (DIRAPI-481) Multi-wildcard substring filters compile to super-linearly backtracking regex Jira
• [jira] [Commented] (DIRAPI-482) Schema-aware LDIF parse silently drops attributes that fail validation Jira
• [jira] [Commented] (DIRAPI-480) TriggerUtils builds DNs by string concatenation without escaping Jira
• [jira] [Commented] (DIRAPI-487) parseOid/parseDescr index past end of input (SIOOBE) Jira
• [jira] [Commented] (DIRAPI-486) GeneralizedTime accepts arbitrary trailing garbage after fractional part Jira
• [jira] [Commented] (DIRAPI-488) Serialize.deserializeInt sign-extends bytes, corrupting stored lengths Jira
• [jira] [Commented] (DIRAPI-489) Reject trailing chars after a numeric OID matching rule in FilterBuilder Jira
• [jira] [Commented] (DIRAPI-490) Never let an unchecked exception escape the OpenLdapSchemaParser - #335 Jira
• [jira] [Commented] (DIRAPI-491) Don't mask chars above the case tables in Strings upper/lower case methods Jira
• [jira] [Resolved] (DIRAPI-491) Don't mask chars above the case tables in Strings upper/lower case methods Jira
• [jira] [Closed] (DIRAPI-490) Never let an unchecked exception escape the OpenLdapSchemaParser - #335 Jira
• [jira] [Resolved] (DIRAPI-490) Never let an unchecked exception escape the OpenLdapSchemaParser - #335 Jira
• [jira] [Closed] (DIRAPI-489) Reject trailing chars after a numeric OID matching rule in FilterBuilder Jira
• [jira] [Resolved] (DIRAPI-489) Reject trailing chars after a numeric OID matching rule in FilterBuilder Jira
• [jira] [Resolved] (DIRAPI-488) Serialize.deserializeInt sign-extends bytes, corrupting stored lengths Jira
• [jira] [Created] (DIRAPI-488) Serialize.deserializeInt sign-extends bytes, corrupting stored lengths Jira
• [jira] [Created] (DIRAPI-487) parseOid/parseDescr index past end of input (SIOOBE) Jira
• [jira] [Resolved] (DIRAPI-485) Subtree refinement parser recurses without depth limit Jira
• [jira] [Created] (DIRAPI-485) Subtree refinement parser recurses without depth limit Jira
• [jira] [Closed] (DIRAPI-481) Multi-wildcard substring filters compile to super-linearly backtracking regex Jira
• [jira] [Resolved] (DIRAPI-481) Multi-wildcard substring filters compile to super-linearly backtracking regex Jira
• [jira] [Resolved] (DIRAPI-484) Malformed stored credentials crash compareCredentials with unchecked exceptions Jira
• [jira] [Closed] (DIRAPI-480) TriggerUtils builds DNs by string concatenation without escaping Jira
• [jira] [Closed] (DIRAPI-484) Malformed stored credentials crash compareCredentials with unchecked exceptions Jira
• [jira] [Created] (DIRAPI-484) Malformed stored credentials crash compareCredentials with unchecked exceptions Jira
• [jira] [Resolved] (DIRAPI-483) Programmatic Ava/Rdn constructors accept structural characters in attribute type Jira
• [jira] [Closed] (DIRAPI-483) Programmatic Ava/Rdn constructors accept structural characters in attribute type Jira
• [jira] [Created] (DIRAPI-483) Programmatic Ava/Rdn constructors accept structural characters in attribute type Jira
• [jira] [Closed] (DIRAPI-482) Schema-aware LDIF parse silently drops attributes that fail validation Jira
• [jira] [Resolved] (DIRAPI-482) Schema-aware LDIF parse silently drops attributes that fail validation Jira
• [jira] [Created] (DIRAPI-482) Schema-aware LDIF parse silently drops attributes that fail validation Jira
• [jira] [Created] (DIRAPI-481) Multi-wildcard substring filters compile to super-linearly backtracking regex Jira
• [jira] [Resolved] (DIRAPI-480) TriggerUtils builds DNs by string concatenation without escaping Jira
• [jira] [Created] (DIRAPI-480) TriggerUtils builds DNs by string concatenation without escaping Jira
• [jira] [Resolved] (DIRAPI-479) parseQuotedSafeUtf8 called on token instead of spec (SIOOBE Jira
• [jira] [Closed] (DIRAPI-479) parseQuotedSafeUtf8 called on token instead of spec (SIOOBE Jira
• [jira] [Created] (DIRAPI-479) parseQuotedSafeUtf8 called on token instead of spec (SIOOBE Jira
• [jira] [Closed] (DIRAPI-478) PasswordModifyResponse toString prints generated password in clear Jira
• [jira] [Created] (DIRAPI-478) PasswordModifyResponse toString prints generated password in clear Jira
• [jira] [Resolved] (DIRAPI-478) PasswordModifyResponse toString prints generated password in clear Jira
• [jira] [Resolved] (DIRAPI-477) SASL layer length field lacks negative and short-read handling Jira
• [jira] [Closed] (DIRAPI-477) SASL layer length field lacks negative and short-read handling Jira
• [jira] [Resolved] (DIRAPI-476) Extended request value unconditionally cast to OpaqueExtendedRequest Jira
• [jira] [Created] (DIRAPI-477) SASL layer length field lacks negative and short-read handling Jira
• [jira] [Closed] (DIRAPI-476) Extended request value unconditionally cast to OpaqueExtendedRequest Jira
• [jira] [Updated] (DIRAPI-476) Extended request value unconditionally cast to OpaqueExtendedRequest Jira
• [jira] [Resolved] (DIRAPI-475) StartTLS detection tests hasControl() instead of the request OID Jira
• [jira] [Created] (DIRAPI-476) Extended request value unconditionally cast to OpaqueExtendedRequest Jira
• [jira] [Closed] (DIRAPI-475) StartTLS detection tests hasControl() instead of the request OID Jira
• [jira] [Created] (DIRAPI-475) StartTLS detection tests hasControl() instead of the request OID Jira
• [jira] [Closed] (DIRAPI-474) Deprecated TLSv1 and TLSv1.1 enabled by default for LDAPS/StartTLS Jira
• [jira] [Resolved] (DIRAPI-474) Deprecated TLSv1 and TLSv1.1 enabled by default for LDAPS/StartTLS Jira
• [jira] [Updated] (DIRAPI-474) Deprecated TLSv1 and TLSv1.1 enabled by default for LDAPS/StartTLS Jira
  • [jira] [Updated] (DIRAPI-474) Deprecated TLSv1 and TLSv1.1 enabled by default for LDAPS/StartTLS Jira
• [jira] [Created] (DIRAPI-474) Deprecated TLSv1 and TLSv1.1 enabled by default for LDAPS/StartTLS Jira
• [jira] [Closed] (DIRAPI-473) authenticated flag set before client-side SASL verification completes Jira
• [jira] [Resolved] (DIRAPI-473) authenticated flag set before client-side SASL verification completes Jira
• [jira] [Created] (DIRAPI-473) authenticated flag set before client-side SASL verification completes Jira
• [jira] [Created] (DIRAPI-467) Strings.toLowerCase(byte[]) crashes on non-ASCII attribute id from network Jira
• [jira] [Created] (DIRAPI-469) BER indefinite-length octet 0x80 silently decoded as zero length Jira
• [jira] [Created] (DIRAPI-471) TLV.getSize() integer overflow bypasses parent length-containment check Jira
• [jira] [Closed] (DIRAPI-471) TLV.getSize() integer overflow bypasses parent length-containment check Jira
• [jira] [Resolved] (DIRAPI-470) 5-byte BER INTEGER in [2^31,2^32) silently wraps negative Jira
• [jira] [Closed] (DIRAPI-470) 5-byte BER INTEGER in [2^31,2^32) silently wraps negative Jira
• [jira] [Created] (DIRAPI-470) 5-byte BER INTEGER in [2^31,2^32) silently wraps negative Jira
• [jira] [Reopened] (DIRAPI-469) BER indefinite-length octet 0x80 silently decoded as zero length Jira
• [jira] [Updated] (DIRAPI-470) 5-byte BER INTEGER in [2^31,2^32) silently wraps negative Jira
• [jira] [Closed] (DIRAPI-472) Pooled connections keep previous borrower's bind identity with default factory Jira
• [jira] [Resolved] (DIRAPI-472) Pooled connections keep previous borrower's bind identity with default factory Jira
• [jira] [Created] (DIRAPI-472) Pooled connections keep previous borrower's bind identity with default factory Jira
• [jira] [Updated] (DIRAPI-471) TLV.getSize() integer overflow bypasses parent length-containment check Jira
• [jira] [Resolved] (DIRAPI-471) TLV.getSize() integer overflow bypasses parent length-containment check Jira
• [jira] [Updated] (DIRAPI-469) BER indefinite-length octet 0x80 silently decoded as zero length Jira
• [jira] [Closed] (DIRAPI-469) BER indefinite-length octet 0x80 silently decoded as zero length Jira
  • [jira] [Closed] (DIRAPI-469) BER indefinite-length octet 0x80 silently decoded as zero length Jira
• [jira] [Resolved] (DIRAPI-469) BER indefinite-length octet 0x80 silently decoded as zero length Jira
• [jira] [Resolved] (DIRAPI-468) Oid.fromBytes crashes and misdecodes multi-byte OID arcs Jira
• [jira] [Closed] (DIRAPI-468) Oid.fromBytes crashes and misdecodes multi-byte OID arcs Jira
• [jira] [Created] (DIRAPI-468) Oid.fromBytes crashes and misdecodes multi-byte OID arcs Jira
• [jira] [Closed] (DIRAPI-467) Strings.toLowerCase(byte[]) crashes on non-ASCII attribute id from network Jira
• [jira] [Resolved] (DIRAPI-467) Strings.toLowerCase(byte[]) crashes on non-ASCII attribute id from network Jira
• [jira] [Closed] (DIRAPI-466) Telephone-number syntax regex has catastrophic exponential backtracking Jira
• [jira] [Created] (DIRAPI-466) Telephone-number syntax regex has catastrophic exponential backtracking Jira
• [jira] [Resolved] (DIRAPI-466) Telephone-number syntax regex has catastrophic exponential backtracking Jira
• [jira] [Resolved] (DIRAPI-465) Schema description escape scan reads past end of line Jira
• [jira] [Closed] (DIRAPI-465) Schema description escape scan reads past end of line Jira
• [jira] [Created] (DIRAPI-465) Schema description escape scan reads past end of line Jira
• [jira] [Closed] (DIRAPI-464) Stored-credential bcrypt work factor drives unbounded CPU cost at bind Jira
• [jira] [Resolved] (DIRAPI-464) Stored-credential bcrypt work factor drives unbounded CPU cost at bind Jira
• [jira] [Created] (DIRAPI-464) Stored-credential bcrypt work factor drives unbounded CPU cost at bind Jira
• [jira] [Resolved] (DIRAPI-463) Unrecognized password-scheme prefix silently falls back to plaintext comparison Jira
• [jira] [Updated] (DIRAPI-463) Unrecognized password-scheme prefix silently falls back to plaintext comparison Jira
• [jira] [Closed] (DIRAPI-463) Unrecognized password-scheme prefix silently falls back to plaintext comparison Jira
• [jira] [Created] (DIRAPI-463) Unrecognized password-scheme prefix silently falls back to plaintext comparison Jira
• [jira] [Closed] (DIRAPI-446) StartTLS transition accepts plaintext LDAP PDUs injected before handshake Jira
• [PR] Bump github/codeql-action/init from 4.37.9 to 4.38.2 [directory-scimple] via GitHub
• [PR] Bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.2 [directory-scimple] via GitHub
• [PR] Bump github/codeql-action/analyze from 4.37.9 to 4.38.2 [directory-scimple] via GitHub
• [jira] [Closed] (DIRAPI-462) Rdn.hashCode() always returns 0 due to variable shadowing Jira
• [jira] [Resolved] (DIRAPI-462) Rdn.hashCode() always returns 0 due to variable shadowing Jira
• [jira] [Created] (DIRAPI-462) Rdn.hashCode() always returns 0 due to variable shadowing Jira
• [jira] [Resolved] (DIRAPI-461) Rdn.unescapeValue mis-decodes specials and silently drops invalid escapes Jira
• [jira] [Closed] (DIRAPI-461) Rdn.unescapeValue mis-decodes specials and silently drops invalid escapes Jira
• [jira] [Created] (DIRAPI-461) Rdn.unescapeValue mis-decodes specials and silently drops invalid escapes Jira
• [jira] [Resolved] (DIRAPI-460) ComplexDnParser silently discards trailing garbage after last RDN Jira
• [jira] [Closed] (DIRAPI-460) ComplexDnParser silently discards trailing garbage after last RDN Jira
• [jira] [Closed] (DIRAPI-448) FilterBuilder concatenates attribute names and matching rules unvalidated Jira
• [jira] [Closed] (DIRAPI-454) NPE decoding endTransaction response control with unregistered OID Jira
• [jira] [Created] (DIRAPI-460) ComplexDnParser silently discards trailing garbage after last RDN Jira
• [jira] [Resolved] (DIRAPI-446) StartTLS transition accepts plaintext LDAP PDUs injected before handshake Jira
• [jira] [Created] (DIRAPI-439) Hostile server subschema bytecode is class-loaded and instantiated on the client Jira
• [jira] [Resolved] (DIRAPI-454) NPE decoding endTransaction response control with unregistered OID Jira
• [jira] [Reopened] (DIRAPI-450) Grammar transitions ignore TLV nesting, enabling filter-structure smuggling Jira
• [jira] [Closed] (DIRAPI-459) FilterParser recurses without depth limit; StackOverflowError on nested filters Jira
• [jira] [Created] (DIRAPI-459) FilterParser recurses without depth limit; StackOverflowError on nested filters Jira
• [jira] [Resolved] (DIRAPI-459) FilterParser recurses without depth limit; StackOverflowError on nested filters Jira
• [jira] [Resolved] (DIRAPI-447) LdifAnonymizer emits original DN-valued attributes in change-add entries Jira
• [jira] [Created] (DIRAPI-458) FilterEncoder passes attacker hex escapes through unencoded Jira
• [jira] [Resolved] (DIRAPI-458) FilterEncoder passes attacker hex escapes through unencoded Jira
• [jira] [Closed] (DIRAPI-458) FilterEncoder passes attacker hex escapes through unencoded Jira
• [jira] [Resolved] (DIRAPI-455) Uncaught IllegalArgumentException on out-of-range ppolicy error value Jira
• [jira] [Closed] (DIRAPI-457) Java deserialization of server-controlled extended-response payload Jira
• [jira] [Resolved] (DIRAPI-457) Java deserialization of server-controlled extended-response payload Jira

• Earlier messages