0004084: phpBB 3.0.7-PL1 bug with security option "Check IP against DNS Blackhole List"

Viewing Issue Simple Details [ Jump to Notes ]

[ View Advanced ] [ Issue History ] [ Print ]

Category

Severity

Reproducibility

Date Submitted

Last Update

0004084

[Quercus]

minor

always

06-17-10 11:18

Reporter

emil

View Status

public

Assigned To

Priority

normal

Resolution

open

Status

new

Product Version

4.0.7

Summary

0004084: phpBB 3.0.7-PL1 bug with security option "Check IP against DNS Blackhole List"

Description

(rep by GT500)

I just found a new phpBB 3.0.7-PL1 bug in Quercus. When the option "Check IP against DNS Blackhole List:" in the "Security settings" section is set to 'Yes',

Additional Information

???javax.naming.InvalidNameException: Empty label must be the last label in
a domain name; remaining name '4.97.1.184.sbl.spamhaus.org..'
com.caucho.quercus.QuercusModuleException: javax.naming.InvalidNameException:
Empty label must be the last label in a domain name; remaining name '4.97.1.184.sbl.spamhaus.org..'
    at com.caucho.quercus.lib.NetworkModule.dns_get(NetworkModule.java:547)
    at com.caucho.quercus.lib.NetworkModule.checkdnsrr(NetworkModule.java:575)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:597)
    at com.caucho.quercus.module.StaticFunction.invoke(StaticFunction.java:135)
    at com.caucho.quercus.env.JavaInvoker.callMethod(JavaInvoker.java:727)
    at com.caucho.quercus.env.JavaInvoker.call(JavaInvoker.java:641)
    at com.caucho.quercus.expr.CallExpr.evalImpl(CallExpr.java:238)
    at com.caucho.quercus.expr.CallExpr.eval(CallExpr.java:151)
    at com.caucho.quercus.expr.Expr.evalBoolean(Expr.java:663)
    at com.caucho.quercus.expr.ConditionalExpr.eval(ConditionalExpr.java:70)
    at com.caucho.quercus.expr.Expr.evalValue(Expr.java:469)
    at com.caucho.quercus.statement.ReturnStatement.execute(ReturnStatement.java:69)
    at com.caucho.quercus.statement.IfStatement.execute(IfStatement.java:81)
    at com.caucho.quercus.statement.IfStatement.execute(IfStatement.java:84)
    at com.caucho.quercus.statement.BlockStatement.execute(BlockStatement.java:105)
    at com.caucho.quercus.program.Function.callImpl(Function.java:431)
    at com.caucho.quercus.program.Function.call(Function.java:349)
    at com.caucho.quercus.expr.CallExpr.evalImpl(CallExpr.java:238)
    at com.caucho.quercus.expr.CallExpr.eval(CallExpr.java:151)
    at com.caucho.quercus.expr.BinaryEqualsExpr.evalBoolean(BinaryEqualsExpr.java:69)
    at com.caucho.quercus.statement.IfStatement.execute(IfStatement.java:80)
    at com.caucho.quercus.statement.ForeachStatement.execute(ForeachStatement.java:186)
    at com.caucho.quercus.statement.BlockStatement.execute(BlockStatement.java:105)
    at com.caucho.quercus.statement.IfStatement.execute(IfStatement.java:81)
    at com.caucho.quercus.statement.BlockStatement.execute(BlockStatement.java:105)
    at com.caucho.quercus.program.Function.callImpl(Function.java:431)
    at com.caucho.quercus.program.Function.callMethod(Function.java:464)
    at com.caucho.quercus.env.ObjectExtValue.callMethod(ObjectExtValue.java:762)
    at com.caucho.quercus.expr.AbstractMethodExpr.eval(AbstractMethodExpr.java:97)
    at com.caucho.quercus.expr.ObjectMethodExpr.eval(ObjectMethodExpr.java:97)
    at com.caucho.quercus.expr.AbstractMethodExpr.evalCopy(AbstractMethodExpr.java:63)
    at com.caucho.quercus.expr.BinaryAssignExpr.eval(BinaryAssignExpr.java:88)
    at com.caucho.quercus.expr.BinaryEqualsExpr.evalBoolean(BinaryEqualsExpr.java:69)
    at com.caucho.quercus.expr.UnaryNotExpr.evalBoolean(UnaryNotExpr.java:72)
    at com.caucho.quercus.statement.IfStatement.execute(IfStatement.java:80)
    at com.caucho.quercus.statement.IfStatement.execute(IfStatement.java:81)
    at com.caucho.quercus.statement.BlockStatement.execute(BlockStatement.java:105)
    at com.caucho.quercus.statement.IfStatement.execute(IfStatement.java:81)
    at com.caucho.quercus.statement.BlockStatement.execute(BlockStatement.java:105)
    at com.caucho.quercus.program.QuercusProgram.execute(QuercusProgram.java:413)
    at com.caucho.quercus.page.InterpretedPage.execute(InterpretedPage.java:89)
    at com.caucho.quercus.env.Env.executePageTop(Env.java:3902)
    at com.caucho.quercus.env.Env.executeTop(Env.java:3845)
    at com.caucho.quercus.servlet.QuercusServletImpl.service(QuercusServletImpl.java:187)
    at com.caucho.quercus.servlet.QuercusServlet.service(QuercusServlet.java:582)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:96)
    at com.caucho.server.dispatch.ServletFilterChain.doFilter(ServletFilterChain.java:109)
    at com.caucho.server.webapp.WebAppFilterChain.doFilter(WebAppFilterChain.java:183)
    at com.caucho.server.webapp.AccessLogFilterChain.doFilter(AccessLogFilterChain.java:103)
    at com.caucho.server.dispatch.ServletInvocation.service(ServletInvocation.java:286)
    at com.caucho.server.http.HttpRequest.handleRequest(HttpRequest.java:789)
    at com.caucho.network.listen.TcpSocketLink.dispatchRequest(TcpSocketLink.java:660)
    at com.caucho.network.listen.TcpSocketLink.handleRequestsImpl(TcpSocketLink.java:624)
    at com.caucho.network.listen.TcpSocketLink.handleRequests(TcpSocketLink.java:575)
    at com.caucho.network.listen.TcpSocketLink$AcceptTask.doTask(TcpSocketLink.java:1183)
    at com.caucho.network.listen.TcpSocketLink$ConnectionReadTask.runThread(TcpSocketLink.java:1118)
    at com.caucho.network.listen.TcpSocketLink$AcceptTask.run(TcpSocketLink.java:1150)
    at com.caucho.util.ThreadPool$PoolThread.runTasks(ThreadPool.java:901)
    at com.caucho.util.ThreadPool$PoolThread.run(ThreadPool.java:866)
Caused by: javax.naming.InvalidNameException: Empty label must be the last
label in a domain name
    at com.sun.jndi.dns.DnsName.add(DnsName.java:283)
    at com.sun.jndi.dns.DnsName.parse(DnsName.java:435)
    at com.sun.jndi.dns.DnsName.<init>(DnsName.java:119)
    at com.sun.jndi.dns.DnsContext.fullyQualify(DnsContext.java:567)
    at com.sun.jndi.dns.DnsContext.c_getAttributes(DnsContext.java:410)
    at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_getAttributes(ComponentDirContext.java:213)
    at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.getAttributes(PartialCompositeDirContext.java:121)
    at com.sun.jndi.toolkit.url.GenericURLDirContext.getAttributes(GenericURLDirContext.java:85)
    at javax.naming.directory.InitialDirContext.getAttributes(InitialDirContext.java:123)
    at com.caucho.quercus.lib.NetworkModule.dns_get(NetworkModule.java:486)
    at com.caucho.quercus.lib.NetworkModule.checkdnsrr(NetworkModule.java:575)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:597)
    at com.caucho.quercus.module.StaticFunction.invoke(StaticFunction.java:135)
    at com.caucho.quercus.env.JavaInvoker.callMethod(JavaInvoker.java:727)
    at com.caucho.quercus.env.JavaInvoker.call(JavaInvoker.java:641)
    at com.caucho.quercus.expr.CallExpr.evalImpl(CallExpr.java:238)
    at com.caucho.quercus.expr.CallExpr.eval(CallExpr.java:151)
    at com.caucho.quercus.expr.Expr.evalBoolean(Expr.java:663)
    at com.caucho.quercus.expr.ConditionalExpr.eval(ConditionalExpr.java:70)
    at com.caucho.quercus.expr.Expr.evalValue(Expr.java:469)
    at com.caucho.quercus.statement.ReturnStatement.execute(ReturnStatement.java:69)
    at com.caucho.quercus.statement.IfStatement.execute(IfStatement.java:81)
    at com.caucho.quercus.statement.IfStatement.execute(IfStatement.java:84)
    at com.caucho.quercus.statement.BlockStatement.execute(BlockStatement.java:105)
    at com.caucho.quercus.program.Function.callImpl(Function.java:431)
    at com.caucho.quercus.program.Function.call(Function.java:349)
    at com.caucho.quercus.expr.CallExpr.evalImpl(CallExpr.java:238)
    at com.caucho.quercus.expr.CallExpr.eval(CallExpr.java:151)
    at com.caucho.quercus.expr.BinaryEqualsExpr.evalBoolean(BinaryEqualsExpr.java:69)
    at com.caucho.quercus.statement.IfStatement.execute(IfStatement.java:80)
    at com.caucho.quercus.statement.ForeachStatement.execute(ForeachStatement.java:186)
    at com.caucho.quercus.statement.BlockStatement.execute(BlockStatement.java:105)
    at com.caucho.quercus.statement.IfStatement.execute(IfStatement.java:81)
    at com.caucho.quercus.statement.BlockStatement.execute(BlockStatement.java:105)
    at com.caucho.quercus.program.Function.callImpl(Function.java:431)
    at com.caucho.quercus.program.Function.callMethod(Function.java:464)
    at com.caucho.quercus.env.ObjectExtValue.callMethod(ObjectExtValue.java:762)
    at com.caucho.quercus.expr.AbstractMethodExpr.eval(AbstractMethodExpr.java:97)
    at com.caucho.quercus.expr.ObjectMethodExpr.eval(ObjectMethodExpr.java:97)
    at com.caucho.quercus.expr.AbstractMethodExpr.evalCopy(AbstractMethodExpr.java:63)
    at com.caucho.quercus.expr.BinaryAssignExpr.eval(BinaryAssignExpr.java:88)
    at com.caucho.quercus.expr.BinaryEqualsExpr.evalBoolean(BinaryEqualsExpr.java:69)
    at com.caucho.quercus.expr.UnaryNotExpr.evalBoolean(UnaryNotExpr.java:72)
    at com.caucho.quercus.statement.IfStatement.execute(IfStatement.java:80)
    at com.caucho.quercus.statement.IfStatement.execute(IfStatement.java:81)
    at com.caucho.quercus.statement.BlockStatement.execute(BlockStatement.java:105)
    at com.caucho.quercus.statement.IfStatement.execute(IfStatement.java:81)
    at com.caucho.quercus.statement.BlockStatement.execute(BlockStatement.java:105)
    at com.caucho.quercus.program.QuercusProgram.execute(QuercusProgram.java:413)
    at com.caucho.quercus.page.InterpretedPage.execute(InterpretedPage.java:89)
    at com.caucho.quercus.env.Env.executePageTop(Env.java:3902)
    at com.caucho.quercus.env.Env.executeTop(Env.java:3845)
    at com.caucho.quercus.servlet.QuercusServletImpl.service(QuercusServletImpl.java:187)
    at com.caucho.quercus.servlet.QuercusServlet.service(QuercusServlet.java:582)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:96)
    at com.caucho.server.dispatch.ServletFilterChain.doFilter(ServletFilterChain.java:109)
    at com.caucho.server.webapp.WebAppFilterChain.doFilter(WebAppFilterChain.java:183)
    at com.caucho.server.webapp.AccessLogFilterChain.doFilter(AccessLogFilterChain.java:103)
    at com.caucho.server.dispatch.ServletInvocation.service(ServletInvocation.java:286)
    at com.caucho.server.http.HttpRequest.handleRequest(HttpRequest.java:789)
    at com.caucho.network.listen.TcpSocketLink.dispatchRequest(TcpSocketLink.java:660)
    at com.caucho.network.listen.TcpSocketLink.handleRequestsImpl(TcpSocketLink.java:624)
    at com.caucho.network.listen.TcpSocketLink.handleRequests(TcpSocketLink.java:575)
    at com.caucho.network.listen.TcpSocketLink$AcceptTask.doTask(TcpSocketLink.java:1183)
    at com.caucho.network.listen.TcpSocketLink$ConnectionReadTask.runThread(TcpSocketLink.java:1118)
    at com.caucho.network.listen.TcpSocketLink$AcceptTask.run(TcpSocketLink.java:1150)
    at com.caucho.util.ThreadPool$PoolThread.runTasks(ThreadPool.java:901)
    at com.caucho.util.ThreadPool$PoolThread.run(ThreadPool.java:866)

Attached Files

Relationships

There are no notes attached to this issue.

Issue History
Date Modified	Username	Field	Change
06-17-10 11:18	emil	New Issue

Mantis 1.0.0rc3[^]

26 total queries executed.
24 unique queries executed.