bugphpGroupWare - Bugs: bug #20806, eval in soap_parser fails

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #20806: eval in soap_parser fails

Submitter:  Olivier Berger <olberger>
Submitted:  Fri 17 Aug 2007 08:58:11 PM UTC
   
 
Category:  soap Item Group:  0.9.16.012
Severity:  3 - Normal Priority:  5 - Normal
Status:  Need Info Privacy:  Public
Assigned to:  Caeies Open/Closed:  Open
Component Version:  None Operating System:  GNU/Linux - Debian
Reproducibility:  None Planned Release:  None
Fixed Release: 

Wed 05 Sep 2007 12:10:49 PM UTC, comment #2: 

Hi Olivier,

The error is "hard" to reproduce and is not completly described here (what kind of error eval produce ?, ...).

Will be hard to help you :).

Regards,

Caeies.


Caeies <Caeies>
Group administrator
Fri 17 Aug 2007 08:59:37 PM UTC, comment #1: 

Btw, PHP Version 5.2.3-1+b1 here... and phpgw 0.9.16.012

 Olivier Berger <olberger>
Fri 17 Aug 2007 08:58:11 PM UTC, original submission:  

The code for soap_parser constructs a PHP expression then evals it.

Unfortunately, this seems broken here when I'm testing :

I'm using Sympa's SOAP server with authenticateAndRun to call complexLists method for an email, and get the following expression in return :
<?xml version="1.0" encoding="UTF-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/1999/XMLSchema-instance" xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/" xmlns:xsd="http://www.w3.org/1999/XMLSchema" soap:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><authenticateAndRunResponse xmlns="urn:sympasoap"><listInfo soapenc:arrayType="xsd:ur-type[2]" xsi:type="soapenc:Array"><item><homepage xsi:type="xsd:string">http://sid.picoforge.test/wws/info/essai1</homepage><listAddress xsi:type="xsd:string">essai1@sid.picoforge.test</listAddress><subject xsi:type="xsd:string">essai1 list</subject></item><item><homepage xsi:type="xsd:string">http://sid.picoforge.test/wws/info/essai1-developers</homepage><listAddress xsi:type="xsd:string">essai1-developers@sid.picoforge.test</listAddress><subject xsi:type="xsd:string">essai1-developers list</subject></item></listInfo></authenticateAndRunResponse></soap:Body></soap:Envelope>

Which results in trying to eval the following expression :
$response = CreateObject("phpgwapi.soapval","authenticateAndRunResponse", "struct" , array( CreateObject("phpgwapi.soapval","listInfo", "Array" , array( CreateObject("phpgwapi.soapval","item", "SOAPStruct" , array( CreateObject("phpgwapi.soapval","homepage", "string" , "http://sid.picoforge.test/wws/info/essai1"), CreateObject("phpgwapi.soapval","listAddress", "string" , "essai1@sid.picoforge.test"), CreateObject("phpgwapi.soapval","subject", "string" , "essai1 list")) ), CreateObject("phpgwapi.soapval","item", "SOAPStruct" , array( CreateObject("phpgwapi.soapval","homepage", "string" , "http://sid.picoforge.test/wws/info/essai1-developers"), CreateObject("phpgwapi.soapval","listAddress", "string" , "essai1-developers@sid.picoforge.test"), CreateObject("phpgwapi.soapval","subject", "string" , "essai1-developers list")) )) )) );

That's probably too complex :(

I think I'll try and use the soap client in PHP5 instead of the phpGroupware one

 Olivier Berger <olberger>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by Caeies (Posted a comment)
  • -email is unavailable- added by olberger (Submitted the item)

    •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 3 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2007-09-05 Caeies Item GroupNone 0.9.16.012
        StatusNone Need Info
        Assigned toNone Caeies

    Back to the top

    Copyright © 2024 Free Software Foundation, Inc.
    Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved.
    The Levitating, Meditating, Flute-playing Gnu logo is a GNU GPL'ed image provided by the Nevrax Design Team.
    Page source code

    Powered by Savane 3.13-72d9.
    Corresponding source code