DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=28062>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=28062

Coccon upload-max-size parameter does not prevent file upload

           Summary: Coccon upload-max-size parameter does not prevent file
                    upload
           Product: Cocoon 2
           Version: 2.1.3
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: Critical
          Priority: Other
         Component: general components
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]


Overview Description: 
Attmepting to upload a file that exceeds the upload-max-size parameter in the
web.xml does not throw an error until the entire file has been processed.

Steps to Reproduce:
1) Upload a file larger than the upload-max-size parameter set in the web.xml
from a browser with the enable-uploads parameter in the web.xml set to true.

Actual Results: 
When the org.apache.cocoon.servlet.multipart.RequestFactory parses the mulitpart
data and places the org.apache.cocoon.servlet.multipart.Part object in the
request (either org.apache.cocoon.servlet.multipart.PartOnDisk or
org.apache.cocoon.servlet.multipart.PartInMemory) the entire file (of any size)
is uploaded by the browser, Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6)
Gecko/20040207 Firefox/0.8, despite a java.io.IOException that is thrown when
the upload-max-size param in the web.xml is exceeded, before an error page is
presented.

Expected Results: 
An error should have been presented prior to the entire file being uploaded by
the browser.


Build Date & Platform: 
03/30/04 build with 2.1.3 on Red Hat 9 WS


Additional Builds and Platforms: 

 - Occurs On
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040207 Firefox/0.8

 - Doesn't Occur On
?

Additional Information: 

The java.io.IOException is included here:
ERROR   (2004-03-30) 11:24.02:738   [access] (Unknown-URI)
Unknown-thread/CocoonServlet: Problem with Cocoon servlet
java.io.IOException: Content length exceeds maximum upload size.
        at
org.apache.cocoon.servlet.multipart.RequestFactory.getServletRequest(RequestFactory.java:105)
        at org.apache.cocoon.servlet.CocoonServlet.service(CocoonServlet.java:1019)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
        at
weblogic.servlet.internal.ServletStubImpl$ServletInvocationAction.run(ServletStubImpl.java:971)
        at
weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java:402)
        at
weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java:305)
        at
weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:6350)
        at
weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:317)
        at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:118)
        at
weblogic.servlet.internal.WebAppServletContext.invokeServlet(WebAppServletContext.java:3635)
        at
weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestImpl.java:2585)
        at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:197)
        at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:170)

Reply via email to