This Bugzilla instance is a read-only archive of historic NetBeans bug reports. To report a bug in NetBeans please follow the project's instructions for reporting issues.

Bug 98809 - Bundle generation application does not handle invalid requests.
Summary: Bundle generation application does not handle invalid requests.
Status: NEW
Alias: None
Product: installer
Classification: Unclassified
Component: NBI (show other bugs)
Version: 6.x
Hardware: PC All
: P4 blocker (vote)
Assignee: Libor Fischmeistr
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-03-23 15:26 UTC by Michael Nazarov
Modified: 2014-02-10 14:15 UTC (History)
0 users

See Also:
Issue Type: DEFECT
Exception Reporter:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Nazarov 2007-03-23 15:26:02 UTC
If one create request to server manually then serverside application might throw
error.
Two examples: if NB IDE excluded from requests and all other components
(including depended on IDE) presents then generated bundle contains only
components not depended on IDE. This is partially correct.
If request contains only one IDE depended component, say mobility, and nothing
more - then application fails and exception appears in browser:
java.io.FileNotFoundException:
/export/nbi/data/milestone-13a-200703221718/temp/bundles/nbi-53787.tmp/bundle.exe
(No such file or directory)

Sample URL used:
http://download.host/nbi/milestone-13a-200703221718/create-bundle?registry=NetBeans%206.0&component=nb-mobility,6.0.0.0.2007032200&platform=windows

Resume: components dependencies should be checked during bundle generation and
appropriate error message should appear.
Comment 1 dlipin 2007-03-23 15:30:59 UTC
You send invalid request and want the server to process it correctly?
Comment 2 Michael Nazarov 2007-03-23 15:34:46 UTC
Yes.
Actually I did not send wrong request, I just send correct request with
incorrect set of components.
Comment 3 dlipin 2007-04-16 14:44:48 UTC
Since server part would not be used for M9 changing the target milestone to TBD.
Lowering th priority since its a very rare use case.
Comment 4 Michael Nazarov 2007-04-16 16:01:25 UTC
> not handle invalid requests
> its a very rare use case

Did you hear about hackers? :)
Invalid unhandled requests is good way for those bad guys. I had no chance to
check is it possible to crash server (or just application) using invalid request
but I'll check and in case of success priority will became P1. Hope you agree.
Comment 5 dlipin 2007-06-19 07:44:30 UTC
Since server part will not be used for M10 changing target milestone to TBD
Comment 6 dlipin 2007-12-15 19:05:05 UTC
lower to P4: it is not used anywhere now and not valid for 6.1 release
Comment 7 Marian Mirilovic 2009-02-20 18:07:23 UTC
update no67 keyword
Comment 8 Jiri Rechtacek 2012-10-07 12:58:30 UTC
Assigned to new owner.