[security-dev 00600]: code review request: 5067458 Loopback SSLSocketImpl createSocket is throwing an exception.

Xuelei Fan Xuelei.Fan at Sun.COM
Mon Feb 23 05:07:49 UTC 2009


I need to get a code review for:
    5067458 Loopback SSLSocketImpl createSocket is throwing an exception.

http://cr.openjdk.java.net/~xuelei/5067458/webrev.00/ 
<http://cr.openjdk.java.net/%7Exuelei/5067458/webrev.00/>

The  bug description:
-------------------------------------------------
i'm attaching an example. in essence, i do this:

            SocketFactory f = SocketFactory.getDefault();
            Socket s = f.createSocket( (String)null, 8080 );

and i create a loopback socket, as per the spec for java.net.Socket.
the createSocket() call throws an exception, but it's an
IOException which indicates "Connection refused" because i don't
have anything listening on that socket. no problem there. however,
then i do this:

            SSLSocketFactory f =
        (SSLSocketFactory)SSLSocketFactory.getDefault();
            SSLSocket s = (SSLSocket)f.createSocket( (String)null,
                                                     8080 );

and i get an IllegalArgumentException from java.net.InetSocketAddress
saying that an InetSocketAddress can't be created with a null
hostname. since SSLSocket extends socket, and the spec doesn't
mention any change in behavior, i would expect to get the same
loopback behavior and another "Connection refused" exception.


Thanks,
Xuelei



More information about the security-dev mailing list