110428 - checkLiveConnectCaller is incorrect in Mozilla Linux version

Status: RESOLVED WORKSFORME

(Core Graveyard :: Java: OJI, defect)

Description

[steve tsai]

I use javascript to call to java applet, but I can not connect to java applet
and I got the following message. It set callee=http://192.168.1.80 and
caller=http://stevexp.synso.com.tw. But they should be the same place. It will
not happen in Mozilla Windows version.


sun.plugin.liveconnect.OriginNotAllowedException: JavaScript is not from the
same origin as the Java code, caller=http://stevexp.synso.com.tw,
callee=http://192.168.1.80/dnpower/java/
	at
sun.plugin.liveconnect.SecureInvocation.checkLiveConnectCaller(SecureInvocation.java:460)
	at sun.plugin.liveconnect.SecureInvocation.CallMethod(SecureInvocation.java:262)
	at sun.plugin.navig.motif.AThread.handleRequest(Native Method)
	at sun.plugin.navig.motif.AThread.JNIHandleLoop(AThread.java:44)
	at sun.plugin.navig.motif.AThread.run(AThread.java:36)

Comment 1

[Norris Boyd]

Reassign to browser.

Comment 2

[Phil Schwartau]

Setting default owner and QA -

Comment 3

[Alexei V. Mokeev]

Reassign to default owners of LiveConnect

Comment 4

[Phil Schwartau]

Over to OJI, and cc'ing Patrick, Mitch 

Comment 5

[Patrick C. Beard]

This is either a bug in the Linux Java plugin, or a bug in our networking code.
CCing the appropriate parties.

Comment 6

[Darin Fisher]

doesn't ring any bells for me...

Comment 7

[Igor Nekrestyanov]

Is there any testcase to reproduce this problem?

Comment 8

[Joe Chou]

reporter, unless we can reproduce the problem, we can't trouble shoot, and 
we'll mark it invalid. 

Comment 9

[steve tsai]

Attachment: Call to java applet from java script to test live connect

Attached please find TestLC.zip including TestLC.html, TestLC.java and
TestLC.class.  A button named "Call to TestLC" in TestLC.html and it will
call to TestLC.class when you click the button. The following are the
testing  procedure.

1. Run mozilla
2. Input testsite/TestLC.html to load TestLC.html and click "Call to TestLC"
button. It works fine.
3. Input 192.168.1.85/TestLC.html to load it again and click "Call to
TestLC" button. It does not work. Some messages will be displayed in Java
Console.
4. Quit mozilla and run it again.
5. Input 192.168.1.85/TestLC.html to load TestLC.html and click "Call to
TestLC" button. It works fine.
6. Input testsite/TestLC.html to load it again and click "Call to TestLC"
button. It does not work. Some messages will be displayed in Java Console.

I test it in Linux, Solaris and Windows 2000 and they have the same problem.

Comment 10

[Sergey Lunegov]

I could'nt access neither stevexp.synco.com.tw nor 192.168.1.80.
I tried testcase by the following way:
1) I load myfirstlocalsite/TestLC.html -- test works
2) I load mysecondlocasite/TestLC.html -- test works
3) exit mozilla.

1) I load mysecondlocalsite/TestLC.html -- test works
2) I load myfirstlocasite/TestLC.html -- test works

Steve, would you please attach TestLC.html from http://stevexp.synco.com.tw ?

I think that this bug may have the same reason as 
#114350 (which depends on #124053
and on #60018). The fix for #60018 requires that origins of java and javascript
must be equal. 

Comment 11

[Denis Antrushin]

Try this:
1) myfirstlocalsite/TestLC.html               - test works
2) ip_address_of_myfirstlocalsite/TestLC.html - test fails

checkLiveConnectCaller performs simple only comparison:
scheme1 == scheme2 && host1 == host2 && port1 == port2.
Obviously, domain name != ip address here.
I think, that protection domain of java applet is cached, so
in case 2,  callee still has myfirstlocalsite location, while
callser has ip_address location.

Comment 12

[Patty Mac]

Chris Petersen is a new QA contact for oji component. His email is:
[e-mail]

Comment 13

[Matthias Versen [:Matti]]

fixing small error for [e-mail] (filter with : SPAMMAILSUCKS)

Comment 14

[Joshua Xia]

reassign to me

Comment 15

[Pete Zha]

testcase works for me on Linux(RH8.0)/windows2000 mozilla1.2 JRE1.4.1_01
Closing