IBM Support

PM98421: CDATA SECTION IN WEB.XML CAUSES LIBERTY PROFILE RUNTIMEEXCEPTION

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • FFDC exception due to CDATA section
    
    FFDC1015I: An FFDC Incident has been created: "java.lang.
    RuntimeException: unexpected event 12 while processing element
    "{http:
    //java.sun.com/xml/ns/javaee}param-value</a>".
    com.ibm.ws.javaee.
    ddmodel.DDParser 410" at ffdc_13.09.23_15.26.57.0.log
    
    ----------------------------------------------------------------
    web.xml
    ----------------------------------------------------------------
    <filter>
        <filter-name>ShiroFilter</filter-name>
    
    <filter-class>org.apache.shiro.web.servlet.IniShiroFilter
    </filter-class>
        <init-param>
            <param-name>config</param-name>
            <param-value>
            <![CDATA[
                # The ShiroFilter configuration is very powerful and
    flexible, while still remaining succinct.
                # Please read the comprehensive example, with full
    comments
    and explanations, in the JavaDoc:
    #
    #
    http://www.jsecurity.
    
    org/api/org/jsecurity/web/servlet/JSecurityFilter.html</a>
          [main]
          shindigSampleRealm =
    org.apache.shindig.sample.shiro.
    SampleShiroRealm
                securityManager.realm = $shindigSampleRealm
                authc.loginUrl = /login.jsp
    
                [urls]
    # The /login.jsp is not restricted to authenticated users
    # (otherwise no one could log in!), but the 'authc' filter
    # must still be specified for it so it can process that url's
    # login submissions. It is 'smart' enough to allow those
    # requests through as specified by the
    # shiro.loginUrl above.
                /login.jsp = authc
                /oauth/authorize/** = authc
                /oauth2/authorize/** = authc]]>
            </param-value>
        </init-param>
    </filter>
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of IBM WebSphere Application      *
    *                  Server Liberty Profile with CDATA in        *
    *                  web.xml                                     *
    ****************************************************************
    * PROBLEM DESCRIPTION: CDATA section markup in web.xml causes  *
    *                      Liberty profile server rumtime          *
    *                      exception.                              *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    FFDC for a RuntimeException is generated due to CDATA
    section in the web.xml of an application. FFDC logged
    will be similar to:
    [INFO    ] FFDC1015I: An FFDC Incident has been created:
    "java.lang.RuntimeException: unexpected event 12 while
    processing element
    "{http://java.sun.com/xml/ns/javaee}param-value".
    com.ibm.ws.javaee.ddmodel.DDParser 410" at
    ffdc_13.09.23_15.26.57.0.log
    

Problem conclusion

  • Deployment descriptor parser code was not treating CDATA events
    as equivalent to CHARACTERS events - this has been rectified.
    
    The fix for this APAR is currently targeted for inclusion in
    fix pack 8.5.5.2. Please refer to the Recommended Updates page
    for delivery information:
    http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
    

Temporary fix

Comments

APAR Information

  • APAR number

    PM98421

  • Reported component name

    LIBERTY PROFILE

  • Reported component ID

    5724J0814

  • Reported release

    850

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2013-10-03

  • Closed date

    2013-11-20

  • Last modified date

    2013-11-20

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    LIBERTY PROFILE

  • Fixed component ID

    5724J0814

Applicable component levels

  • R850 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"850","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
28 April 2022