Exception while unmarshalling Integer with an element bigger than 32-bit

Ian Young ian at iay.org.uk
Wed Jun 6 22:08:53 BST 2012


On 6 Jun 2012, at 22:05, Cantor, Scott wrote:

>> This is why the UK federation metadata toolchain strips serial numbers
>> from embedded credentials before publication.  The comment I have on that
>> says that libxml2 falls over if it sees long ones, and there must have
>> been some vendor implementation that croaked.
> 
> Yes, I triggered that originally by generating signatures with that
> element in it by default before we found the problem.

I think we had one case where someone's SP fell over just reading the metadata.

Depressing, really.

	-- Ian



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4813 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20120606/78ef581a/attachment-0001.bin 


More information about the users mailing list