Java Solaris Communities Sun Store Join SDN My Profile Why Join?
 
Bug Database
Bug Detail
Quick Lists
Top 25 Bugs
Top 25 RFE's
Recently Closed Bugs
Printable Page Printable Page


Bug Database
Bug ID: 6768136
Votes 0
Synopsis Malformed 404s cause breakage of Java/JavaScript bridge and browser hangs
Category java_plugin:plugin2
Reported Against
Release Fixed 6u11(b03)
State 10-Fix Delivered, bug
Priority: 2-High
Related Bugs
Submit Date 06-NOV-2008
Description
Some web servers are misconfigured and do not return correctly formed 404 errors; the 404 is returned as an HTML page but the status code of the HTTP reply is not set. This causes the Java networking stack to become confused and the Java Plug-In to attempt to define a class with the contents of the 404 HTML page, which causes the JavaScript/Java bridge to break and the browser to hang.
Posted Date : 2008-11-06 00:59:49.0
Work Around
N/A
Evaluation
see comments.
Posted Date : 2008-11-06 23:00:07.0

Some web servers do not return properly formatted 404 HTTP responses,
which can cause the Java networking stack to confuse the HTML page
corresponding to the 404 with the bytes for a class file. This causes
a ClassFormatError to be thrown from deep within the Java Plug-In,
preventing a reply for a JavaScript -> Java call from being sent back
to the web browser and leading to a browser hang.

This issue has been fixed in the following ways:

  - Explicitly catching the ClassFormatError at the point of failure
    in the JavaScript -> Java bridge.

  - Catching all Throwables, not just Exceptions, during attempted
    JavaScript -> Java invocations so that an error reply can be
    returned to the browser for Errors as well as Exceptions.

  - Explicitly disabling the codebase lookup for class loaders created
    for so-called "dummy applets", which implement the "java" and
    "Packages" keywords in the Firefox browser, so that we will not
    make the round-trip to the server for bogus classes such as
    "java.class".
Posted Date : 2008-11-07 02:30:26.0
Comments
  
  Include a link with my name & email   


PLEASE NOTE: JDK6 is formerly known as Project Mustang