Uploaded image for project: 'Lucee Development'
  1. LDEV-1339

Empty string to XMLTransform causes Access is Denied exception

    Details

    • Type: Bug
    • Status: Deployed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 5.2.2.28
    • Labels:
      None
    • Environment:

      Windows / Lucee/ Tomcat

    • Sprint:
      May-June 2017 Sprint

      Description

      Passing an empty string into xml parameter of xmlTransform causes Lucee to try and create a file input stream object which then causes Java to create a bufferedInputStream to a non-existent file. This causes an "Access is Denied" exception.

      D:\xx\xxx\xxx\xxx (Access is denied)
      at java.io.FileInputStream.open0(Native Method):-2
      at java.io.FileInputStream.open(FileInputStream.java:195):195
      at java.io.FileInputStream.<init>(FileInputStream.java:138):138
      at lucee.commons.io.res.type.file.FileResource.getInputStream(FileResource.java:195):195
      at lucee.commons.io.IOUtil.getReader(IOUtil.java:510):510
      at lucee.commons.io.IOUtil.toString(IOUtil.java:712):712
      at lucee.runtime.text.xml.XMLUtil.toInputSource(XMLUtil.java:1120):1120
      at lucee.runtime.text.xml.XMLUtil.toInputSource(XMLUtil.java:1167):1167
      at lucee.runtime.text.xml.XMLUtil.toInputSource(XMLUtil.java:1155):1155
      at lucee.runtime.functions.xml.XmlTransform.call(XmlTransform.java:46):46

        Attachments

          Activity

            People

            • Assignee:
              michaeloffner Michael Offner
              Reporter:
              runespyder Shawn Clark
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: