search

y1z2g3 / owasp-esapi-java

Automatically exported from code.google.com/p/owasp-esapi-java
Other
0 stars 0 forks source link

Executor.executeSystemCommand has an invalid path comparison and throws exception #3

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago 
What steps will reproduce the problem?
1. Windows XP Professional
2. Java 1.6 update 5
3. Eclipse 3.3
4. run JUnit "ALLTests"

What is the expected output? What do you see instead?
ExecutorTest.java gets an assertion failure due to an incorrect exception 
thrown by Executor.executeSystemCommand. This method compares the 
canonical path to the path supplied to the executable. It uses an "equals" 
operation when an "equalsIgnoreCase" will produce the required results.

Canonical Path: C:\WINDOWS\system32\cmd.exe
Executable Path: C:\Windows\System32\cmd.exe
The following code is then executed: throw new ExecutorException
("Execution failure", "Invalid path to executable file: " + executable);

What version of the product are you using? ESAPI v1.1.1 Complete JAR file

On what operating system? Windows XP professional 
Java 1.6 update 5

Please provide any additional information below.

Original issue reported on code.google.com by robert.m...@gmail.com on 7 Apr 2008 at 5:54

GoogleCodeExporter commented 8 years ago

Original comment by planetlevel on 13 Jul 2008 at 2:35