victims / victims-web

The victims web application.
GNU Affero General Public License v3.0
8 stars 5 forks source link

Fix infinite loop downloading maven artifact #153

Closed jasinner closed 6 years ago

jasinner commented 6 years ago

This submission for example causes an infinite loop:

http://localhost:8080/service/v2/submit/archive/java/?version=7.2.0.Alpha2&groupId=org.jboss.web&artifactId=jbossweb&cves=2013-2185

In the log file we see 2 log messages repeated:

WARNING: sha1 not found in rep https://maven.repository.redhat.com/ga/org/jboss/web/jbossweb/7.2.0.Alpha2/jbossweb-7.2.0.Alpha2.jar DEBUG: Downloading from: http://repo1.maven.org/maven2/org/jboss/web/jbossweb/7.2.0.Alpha2/jbossweb-7.2.0.Alpha2.jar

jasinner commented 6 years ago

On a subsequent attempt there was no infinite loop. Closing for now.