[JBoss JIRA] Created: (EJBTHREE-1027) Timeout method gets called with an unspecified caller identity
by Carlo de Wolf (JIRA)
Timeout method gets called with an unspecified caller identity
--------------------------------------------------------------
Key: EJBTHREE-1027
URL: http://jira.jboss.com/jira/browse/EJBTHREE-1027
Project: EJB 3.0
Issue Type: Bug
Components: Security
Affects Versions: AS 4.2.1.GA
Reporter: Carlo de Wolf
Having a secured bean with a timeout method with @PermitAll, but without an unauthenticatedIdentity will lead to a 'random' identity being used to call the method or no identity at all. The last one leads to EJBAccessExceptions.
Spec 18.2.2:
"Since the timeout callback method is an internal method of the bean class, it has no client security context. When getCallerPrincipal is called from within the timeout callback method, it returns the container's representation of the unauthenticated identity."
We must disallow all calls to a timeout method if unauthenticatedIdentity is not set.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
18 years, 5 months
[JBoss JIRA] Created: (EJBTHREE-1175) ThreadlocalPool does not remove active BeanContext instances from InfinitePool
by Galder Zamarreno (JIRA)
ThreadlocalPool does not remove active BeanContext instances from InfinitePool
------------------------------------------------------------------------------
Key: EJBTHREE-1175
URL: http://jira.jboss.com/jira/browse/EJBTHREE-1175
Project: EJB 3.0
Issue Type: Bug
Affects Versions: AS 4.2.2.GA
Reporter: Galder Zamarreno
Assigned To: Carlo de Wolf
Priority: Critical
I've done a mental walkthrough of StatelessInstanceInterceptor.invoke() and seems
like there might be a leak:
1st ejb3 stateless invocation:
call StatelessInstanceInterceptor.invoke()
call pool.get()
-> start ThreadlocalPool.get()
// currentBeanContext is null so
create new BeanContext and add it to InfinitePool.active
return created BeanContext
// currentBeanContext is still null upon return
-> end ThreadlocalPool.get()
call ejb.invokeNext();
call pool.release(ctx);
-> start ThreadlocalPool.release()
//currentBeanContext is null so
call currentBeanContext.set(ctx);
-> end ThreadlocalPool.release()
end StatelessInstanceInterceptor.invoke()
// created BeanContext is still in InfinitePool.active
// currentBeanContext is not null now and contains the ctx created for this invocation
2nd ejb3 stateless invocation:
call StatelessInstanceInterceptor.invoke()
call pool.get()
-> start ThreadlocalPool.get()
// currentBeanContext is not null
assign currentBeanContext.get to ctx
set currentBeanContext to null
return ctx
// currentBeanContext is null upon return
-> end ThreadlocalPool.get()
call ejb.invokeNext();
call pool.release(ctx);
-> start ThreadlocalPool.release()
//currentBeanContext is null so
call currentBeanContext.set(ctx);
-> end ThreadlocalPool.release()
end StatelessInstanceInterceptor.invoke()
// BeanContext is still in InfinitePool.active
// currentBeanContext is not null now and contains the ctx created for this invocation
Looks to me like there's a leak as active contexts are never removed from InfinitePool.active List
because currentBeanContext is always null when it the call lands on pool.release(ctx).
Screenshots of the memory analysis can be found in the support case.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
18 years, 5 months
[JBoss JIRA] Created: (JBMESSAGING-1220) When an JBM client encounters an OOM, it causes to hang the JBM server
by Tyronne Wickramarathne (JIRA)
When an JBM client encounters an OOM, it causes to hang the JBM server
----------------------------------------------------------------------
Key: JBMESSAGING-1220
URL: http://jira.jboss.com/jira/browse/JBMESSAGING-1220
Project: JBoss Messaging
Issue Type: Bug
Components: Messaging Core
Affects Versions: 1.4.0.SP3
Environment: Fedora 8, JBM-1.4.0-SP3, JDK-1.5.0_14
Reporter: Tyronne Wickramarathne
Assigned To: Tim Fox
1. Connect a JMS Topic Subscriber with limited memory (e.g. -Xmx64m), that buffers an infinite number of messages.
2. Publish messages to JBM, on the same subscribed topic, until the client runs out of memory.
3. Try to connect another client, publish more messages, etc. You should see the problem at this point.
4. Kill the OOM client. The system should recover.
5. at this point, the JBM server gets hanged
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
18 years, 5 months