[security-dev 00601]: Re: code review request: 5067458 Loopback SSLSocketImpl createSocket is throwing an exception.
Max (Weijun) Wang
Weijun.Wang at Sun.COM
Mon Feb 23 05:25:04 UTC 2009
Fix looks fine.
BTW, SSLSocketFactory has another method
createSocket(Socket s, String host,
int port, boolean autoClose)
How does it behave? and, will you clarify its javadoc on the host
argument?
Max
On Feb 23, 2009, at 1:07 PM, Xuelei Fan wrote:
> I need to get a code review for:
> 5067458 Loopback SSLSocketImpl createSocket is throwing an
> exception.
>
> http://cr.openjdk.java.net/~xuelei/5067458/webrev.00/ <http://cr.openjdk.java.net/%7Exuelei/5067458/webrev.00/
> >
>
> The bug description:
> -------------------------------------------------
> i'm attaching an example. in essence, i do this:
>
> SocketFactory f = SocketFactory.getDefault();
> Socket s = f.createSocket( (String)null, 8080 );
>
> and i create a loopback socket, as per the spec for java.net.Socket.
> the createSocket() call throws an exception, but it's an
> IOException which indicates "Connection refused" because i don't
> have anything listening on that socket. no problem there. however,
> then i do this:
>
> SSLSocketFactory f =
> (SSLSocketFactory)SSLSocketFactory.getDefault();
> SSLSocket s = (SSLSocket)f.createSocket( (String)null,
> 8080 );
>
> and i get an IllegalArgumentException from java.net.InetSocketAddress
> saying that an InetSocketAddress can't be created with a null
> hostname. since SSLSocket extends socket, and the spec doesn't
> mention any change in behavior, i would expect to get the same
> loopback behavior and another "Connection refused" exception.
>
>
> Thanks,
> Xuelei
More information about the security-dev
mailing list