Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8031466

LdapCtx does not check if java.naming.ldap.factory.socket refers to a SocketFactory

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: P4 P4
    • None
    • 8
    • core-libs
    • None

      com.sun.jndi.ldap.LdapCtx accepts a user customizable socket factory setting through the "java.naming.ldap.factory.socket" environment property. This property should be assigned a class name which extends SocketFactory. However, this is not always checked, and the user can simply provide a non SocketFactory class as long as it includes the correct method names.

            aefimov Aleksej Efimov
            weijun Weijun Wang
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: