Details

    • Affects:
      Release Notes
    • Affects Testing:
      Regression
    • Release Notes Text:
      When WSDL location starts with classpath: and the WSDL is not found in the app archive, the server's classloader is referenced. This issue has been resolved in this release of JBoss EAP 5.
    • Release Notes Docs Status:
      Documented as Resolved Issue
    • Docs QE Status:
      NEW
    • Target Release:

      Description

      Cloned from SOA-P BZ: https://bugzilla.redhat.com/show_bug.cgi?id=1028865

      CVE-2012-2379 (JBPAPP-9224) seems to have introduced the following issue to EAP 5.2.0.

      Given we have the following web service:

      @WebService(... wsdlLocation = "classpath:/greeting.wsdl")
      public class GreetingServiceImpl implements GreetingService {
        ...
      

      and we have separate packages for the web service impl and WSDL, say, example-ws.war and example-wsdl.jar, deploying example-wsdl.jar to $PROFILE/lib (or $JBOSS_HOME/jboss-as/common/lib) and then example-ws.war to $PROFILE/deploy leads to the following error at deployment time.

      org.jboss.deployers.spi.DeploymentException: Error during deploy: vfszip:/opt/jboss-soa-p-5.3.1-cxf/jboss-as/server/default/deploy/example-ws.war/
      	at org.jboss.deployers.spi.DeploymentException.rethrowAsDeploymentException(DeploymentException.java:49)
      	at org.jboss.deployers.plugins.deployers.DeployerWrapper.deploy(DeployerWrapper.java:185)
      	at org.jboss.deployers.plugins.deployers.DeployersImpl.doDeploy(DeployersImpl.java:1454)
      	at org.jboss.deployers.plugins.deployers.DeployersImpl.doInstallParentFirst(DeployersImpl.java:1172)
      	at org.jboss.deployers.plugins.deployers.DeployersImpl.install(DeployersImpl.java:1113)
      	at org.jboss.dependency.plugins.AbstractControllerContext.install(AbstractControllerContext.java:348)
      	at org.jboss.dependency.plugins.AbstractController.install(AbstractController.java:1652)
      	at org.jboss.dependency.plugins.AbstractController.incrementState(AbstractController.java:938)
      	at org.jboss.dependency.plugins.AbstractController.resolveContexts(AbstractController.java:1082)
      	at org.jboss.dependency.plugins.AbstractController.resolveContexts(AbstractController.java:988)
      	at org.jboss.dependency.plugins.AbstractController.change(AbstractController.java:826)
      	at org.jboss.dependency.plugins.AbstractController.change(AbstractController.java:556)
      	at org.jboss.deployers.plugins.deployers.DeployersImpl.process(DeployersImpl.java:789)
      	at org.jboss.deployers.plugins.main.MainDeployerImpl.process(MainDeployerImpl.java:699)
      	at org.jboss.system.server.profileservice.repository.MainDeployerAdapter.process(MainDeployerAdapter.java:117)
      	at org.jboss.system.server.profileservice.hotdeploy.HDScanner.scan(HDScanner.java:409)
      	at org.jboss.system.server.profileservice.hotdeploy.HDScanner.run(HDScanner.java:294)
      	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
      	at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:304)
      	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:178)
      	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293)
      	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
      	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
      	at java.lang.Thread.run(Thread.java:744)
      Caused by: java.lang.RuntimeException: java.io.IOException: Could not find classpath:/greeting.wsdl in the additional metadatafiles!
      	at org.jboss.wsf.stack.cxf.DescriptorDeploymentAspect.checkCVE20122379(DescriptorDeploymentAspect.java:267)
      	at org.jboss.wsf.stack.cxf.DescriptorDeploymentAspect.create(DescriptorDeploymentAspect.java:83)
      	at org.jboss.wsf.framework.deployment.DeploymentAspectManagerImpl.deploy(DeploymentAspectManagerImpl.java:115)
      	at org.jboss.wsf.container.jboss50.deployer.ArchiveDeployerHook.deploy(ArchiveDeployerHook.java:76)
      	at org.jboss.wsf.container.jboss50.deployer.AbstractWebServiceDeployer.internalDeploy(AbstractWebServiceDeployer.java:60)
      	at org.jboss.deployers.spi.deployer.helpers.AbstractRealDeployer.deploy(AbstractRealDeployer.java:55)
      	at org.jboss.deployers.plugins.deployers.DeployerWrapper.deploy(DeployerWrapper.java:179)
      	... 22 more
      Caused by: java.io.IOException: Could not find classpath:/greeting.wsdl in the additional metadatafiles!
      	at org.jboss.wsf.framework.deployment.ResourceResolverImpl.resolve(ResourceResolverImpl.java:121)
      	at org.jboss.wsf.stack.cxf.DescriptorDeploymentAspect.checkCVE20122379(DescriptorDeploymentAspect.java:261)
      	... 28 more
      

        Gliffy Diagrams

          Attachments

          1. example-ws.war
            10 kB
          2. example-wsdl.jar
            1 kB
          3. xdiff.txt
            1 kB

            Issue Links

              Activity

                People

                • Assignee:
                  rsearls r searls
                  Reporter:
                  tadayosi Tadayoshi Sato
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  5 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: