[JBoss JIRA] (JBWEB-220) Hashdos fix (maximum parameter limit) in jbossweb 2.0.0GA-CP is incomplete
by Pieter Bos (Created) (JIRA)
Hashdos fix (maximum parameter limit) in jbossweb 2.0.0GA-CP is incomplete
--------------------------------------------------------------------------
Key: JBWEB-220
URL: https://issues.jboss.org/browse/JBWEB-220
Project: JBoss Web
Issue Type: Bug
Security Level: Public (Everyone can see)
Affects Versions: JBossWeb-2.0.0.GA_CP11
Reporter: Pieter Bos
Assignee: Remy Maucherat
Because i do not want our application to be vulnerable to the recently disclosed hashmap collision denial of service attack, i checked if jbossweb was updated for this issue. This seemed to be the case.
However, when i applied the fix and wrote the following ruby script to test this, the hole still seemed wide open. The fix has been applied to GET requests, but not to POST requests. This only is a problem in version 2.0.0-GA-CP, and it should not be in 2.1 or 3.0. However, i have not tested the other versions.
Script to replicate this, in ruby:
BEGIN OF SCRIPT
require "net/http"
require "uri"
uri = URI.parse("http://localhost:9090/")
post_data = {}
(1..4000).each do |i|
post_data[i.to_s]=i.to_s
end
response = Net::HTTP.post_form(uri, post_data)
puts response
END OF SCRIPT
Result:
ruby-1.8.7-p334 :012 > response = Net::HTTP.post_form(uri, post_data)
=> #<Net::HTTPOK 200 OK readbody=true>
This should have been:
#<Net::HTTPInternalServerError 500 Internal Server Error readbody=true>
The fix is easy:
Revision 1903 in SVN should have fixed the problem. The fix has been applied to GET requests, but not for POST request. On Parameters.java, line 323, in the method addParam, there should be these three lines:
if (paramHashStringArray.size() >=MAX_COUNT) {
throw new IllegalStateException("Parameter count exceeded allowed maximum: " + MAX_COUNT);
}
If you add them, the problem has been solved.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
12 years, 6 months
[JBoss JIRA] (AS7-3167) Persistent file-store for sessions (preload="true" passivation="false" purge="false") results in "CacheException: Unable to unmarshall value"
by Radoslav Husar (Created) (JIRA)
Persistent file-store for sessions (preload="true" passivation="false" purge="false") results in "CacheException: Unable to unmarshall value"
---------------------------------------------------------------------------------------------------------------------------------------------
Key: AS7-3167
URL: https://issues.jboss.org/browse/AS7-3167
Project: Application Server 7
Issue Type: Feature Request
Components: Clustering
Affects Versions: 7.1.0.CR1
Reporter: Radoslav Husar
Assignee: Paul Ferraro
Priority: Critical
Fix For: 7.1.0.Final
Using a standard file-store to persist sessions
{code:xml}
<replicated-cache mode="ASYNC" name="repl" batching="true">
<file-store preload="true" passivation="false" purge="false"/>
</replicated-cache>
{code}
preload = persistent sessions
passivation = passivate all of them, not only evicted
purge = survive restarts
Results in "Unable to unmarshall value"
{noformat}
13:47:02,882 INFO [org.jboss.as.server] (DeploymentScanner-threads - 2) JBAS018559: Deployed "clusterbench-ee6.ear"
13:47:05,452 INFO [org.jboss.test.clusterbench.web.session.HttpSessionServlet] (http-rhusar.brq.redhat.com-10.34.3.13-8080-1) New session created: 6BhdZPi1KcC54HJvCGD9nX7L
13:47:11,346 ERROR [org.infinispan.interceptors.InvocationContextInterceptor] (http-rhusar.brq.redhat.com-10.34.3.13-8080-1) ISPN000136: Execution error: org.infinispan.CacheException: Unable to unmarshall value
at org.infinispan.marshall.MarshalledValue.deserialize0(MarshalledValue.java:152)
at org.infinispan.marshall.MarshalledValue.deserialize(MarshalledValue.java:136)
at org.infinispan.marshall.MarshalledValue.equals(MarshalledValue.java:248)
at java.util.HashMap.put(HashMap.java:376) [:1.6.0_29]
at org.infinispan.loaders.bucket.Bucket.addEntry(Bucket.java:49)
at org.infinispan.loaders.bucket.BucketBasedCacheStore.storeLockSafe(BucketBasedCacheStore.java:88)
at org.infinispan.loaders.bucket.BucketBasedCacheStore.storeLockSafe(BucketBasedCacheStore.java:49)
at org.infinispan.loaders.LockSupportCacheStore.store(LockSupportCacheStore.java:195)
at org.infinispan.loaders.AbstractCacheStore.applyModifications(AbstractCacheStore.java:121)
at org.infinispan.loaders.AbstractCacheStore.prepare(AbstractCacheStore.java:138)
at org.infinispan.interceptors.CacheStoreInterceptor.prepareCacheLoader(CacheStoreInterceptor.java:263)
at org.infinispan.interceptors.CacheStoreInterceptor.visitPrepareCommand(CacheStoreInterceptor.java:177)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.base.CommandInterceptor.invokeNextInterceptor(CommandInterceptor.java:119)
at org.infinispan.interceptors.base.CommandInterceptor.handleDefault(CommandInterceptor.java:133)
at org.infinispan.commands.AbstractVisitor.visitPrepareCommand(AbstractVisitor.java:113)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.base.CommandInterceptor.invokeNextInterceptor(CommandInterceptor.java:119)
at org.infinispan.interceptors.EntryWrappingInterceptor.visitPrepareCommand(EntryWrappingInterceptor.java:74)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.base.CommandInterceptor.invokeNextInterceptor(CommandInterceptor.java:119)
at org.infinispan.interceptors.locking.AbstractTxLockingInterceptor.invokeNextAndCommitIf1Pc(AbstractTxLockingInterceptor.java:100)
at org.infinispan.interceptors.locking.OptimisticLockingInterceptor.visitPrepareCommand(OptimisticLockingInterceptor.java:98)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.base.CommandInterceptor.invokeNextInterceptor(CommandInterceptor.java:119)
at org.infinispan.interceptors.NotificationInterceptor.visitPrepareCommand(NotificationInterceptor.java:49)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.base.CommandInterceptor.invokeNextInterceptor(CommandInterceptor.java:119)
at org.infinispan.interceptors.base.CommandInterceptor.handleDefault(CommandInterceptor.java:133)
at org.infinispan.commands.AbstractVisitor.visitPrepareCommand(AbstractVisitor.java:113)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.base.CommandInterceptor.invokeNextInterceptor(CommandInterceptor.java:119)
at org.infinispan.interceptors.TxInterceptor.visitPrepareCommand(TxInterceptor.java:104)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.base.CommandInterceptor.invokeNextInterceptor(CommandInterceptor.java:119)
at org.infinispan.interceptors.StateTransferLockInterceptor.handleWithRetries(StateTransferLockInterceptor.java:181)
at org.infinispan.interceptors.StateTransferLockInterceptor.visitPrepareCommand(StateTransferLockInterceptor.java:62)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.base.CommandInterceptor.invokeNextInterceptor(CommandInterceptor.java:119)
at org.infinispan.interceptors.base.CommandInterceptor.handleDefault(CommandInterceptor.java:133)
at org.infinispan.commands.AbstractVisitor.visitPrepareCommand(AbstractVisitor.java:113)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.base.CommandInterceptor.invokeNextInterceptor(CommandInterceptor.java:119)
at org.infinispan.interceptors.InvocationContextInterceptor.handleAll(InvocationContextInterceptor.java:107)
at org.infinispan.interceptors.InvocationContextInterceptor.handleDefault(InvocationContextInterceptor.java:67)
at org.infinispan.commands.AbstractVisitor.visitPrepareCommand(AbstractVisitor.java:113)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.base.CommandInterceptor.invokeNextInterceptor(CommandInterceptor.java:119)
at org.infinispan.interceptors.base.CommandInterceptor.handleDefault(CommandInterceptor.java:133)
at org.infinispan.commands.AbstractVisitor.visitPrepareCommand(AbstractVisitor.java:113)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.base.CommandInterceptor.invokeNextInterceptor(CommandInterceptor.java:119)
at org.infinispan.interceptors.BatchingInterceptor.handleDefault(BatchingInterceptor.java:77)
at org.infinispan.commands.AbstractVisitor.visitPrepareCommand(AbstractVisitor.java:113)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.InterceptorChain.invoke(InterceptorChain.java:318)
at org.infinispan.transaction.TransactionCoordinator.commit(TransactionCoordinator.java:159)
at org.infinispan.transaction.synchronization.SynchronizationAdapter.afterCompletion(SynchronizationAdapter.java:83)
at org.infinispan.transaction.tm.DummyTransaction.notifyAfterCompletion(DummyTransaction.java:266)
at org.infinispan.transaction.tm.DummyTransaction.runCommitTx(DummyTransaction.java:315)
at org.infinispan.transaction.tm.DummyTransaction.commit(DummyTransaction.java:84)
at org.infinispan.transaction.tm.DummyBaseTransactionManager.commit(DummyBaseTransactionManager.java:97)
at org.jboss.as.clustering.web.impl.TransactionBatchingManager.endBatch(TransactionBatchingManager.java:75)
at org.jboss.as.web.session.DistributableSessionManager.processSessionRepl(DistributableSessionManager.java:1525) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.jboss.as.web.session.DistributableSessionManager.storeSession(DistributableSessionManager.java:855) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.jboss.as.web.session.InstantSnapshotManager.snapshot(InstantSnapshotManager.java:45) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.jboss.as.web.session.ClusteredSessionValve.handleRequest(ClusteredSessionValve.java:131) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.jboss.as.web.session.ClusteredSessionValve.invoke(ClusteredSessionValve.java:89) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.jboss.as.web.session.JvmRouteValve.invoke(JvmRouteValve.java:88) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.jboss.as.web.session.LockingValve.invoke(LockingValve.java:56) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:151) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:155) [jbossweb-7.0.7.Final.jar:]
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) [jbossweb-7.0.7.Final.jar:]
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) [jbossweb-7.0.7.Final.jar:]
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:362) [jbossweb-7.0.7.Final.jar:]
at org.apache.coyote.http11.Http11AprProcessor.process(Http11AprProcessor.java:897) [jbossweb-7.0.7.Final.jar:]
at org.apache.coyote.http11.Http11AprProtocol$Http11ConnectionHandler.process(Http11AprProtocol.java:626) [jbossweb-7.0.7.Final.jar:]
at org.apache.tomcat.util.net.AprEndpoint$Worker.run(AprEndpoint.java:2033) [jbossweb-7.0.7.Final.jar:]
at java.lang.Thread.run(Thread.java:662) [:1.6.0_29]
Caused by: java.lang.ClassNotFoundException: org.jboss.as.clustering.web.infinispan.DistributedCacheManagerFactory$SessionKeyImpl from [Module "deployment.clusterbench-ee6.ear.clusterbench-ee6-web.war:main" from Service Module Loader]
at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:190)
at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:468)
at org.jboss.modules.ConcurrentClassLoader.performLoadClassChecked(ConcurrentClassLoader.java:456)
at org.jboss.modules.ConcurrentClassLoader.performLoadClassChecked(ConcurrentClassLoader.java:423)
at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:398)
at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:120)
at java.lang.Class.forName0(Native Method) [:1.6.0_29]
at java.lang.Class.forName(Class.java:247) [:1.6.0_29]
at org.jboss.marshalling.AbstractClassResolver.loadClass(AbstractClassResolver.java:135)
at org.jboss.marshalling.AbstractClassResolver.resolveClass(AbstractClassResolver.java:116)
at org.jboss.marshalling.river.RiverUnmarshaller.doReadClassDescriptor(RiverUnmarshaller.java:888)
at org.jboss.marshalling.river.RiverUnmarshaller.doReadNewObject(RiverUnmarshaller.java:1200)
at org.jboss.marshalling.river.RiverUnmarshaller.doReadObject(RiverUnmarshaller.java:272)
at org.jboss.marshalling.river.RiverUnmarshaller.doReadObject(RiverUnmarshaller.java:209)
at org.jboss.marshalling.AbstractObjectInput.readObject(AbstractObjectInput.java:37)
at org.infinispan.marshall.jboss.AbstractJBossMarshaller.objectFromObjectStream(AbstractJBossMarshaller.java:120)
at org.infinispan.marshall.VersionAwareMarshaller.objectFromByteBuffer(VersionAwareMarshaller.java:115)
at org.infinispan.marshall.AbstractMarshaller.objectFromByteBuffer(AbstractMarshaller.java:90)
at org.infinispan.marshall.AbstractDelegatingMarshaller.objectFromByteBuffer(AbstractDelegatingMarshaller.java:74)
at org.infinispan.marshall.MarshalledValue.deserialize0(MarshalledValue.java:147)
... 78 more
13:47:11,357 ERROR [org.infinispan.transaction.TransactionCoordinator] (http-rhusar.brq.redhat.com-10.34.3.13-8080-1) ISPN000097: Error while processing 1PC PrepareCommand: org.infinispan.CacheException: Unable to unmarshall value
at org.infinispan.marshall.MarshalledValue.deserialize0(MarshalledValue.java:152)
at org.infinispan.marshall.MarshalledValue.deserialize(MarshalledValue.java:136)
at org.infinispan.marshall.MarshalledValue.equals(MarshalledValue.java:248)
at java.util.HashMap.put(HashMap.java:376) [:1.6.0_29]
at org.infinispan.loaders.bucket.Bucket.addEntry(Bucket.java:49)
at org.infinispan.loaders.bucket.BucketBasedCacheStore.storeLockSafe(BucketBasedCacheStore.java:88)
at org.infinispan.loaders.bucket.BucketBasedCacheStore.storeLockSafe(BucketBasedCacheStore.java:49)
at org.infinispan.loaders.LockSupportCacheStore.store(LockSupportCacheStore.java:195)
at org.infinispan.loaders.AbstractCacheStore.applyModifications(AbstractCacheStore.java:121)
at org.infinispan.loaders.AbstractCacheStore.prepare(AbstractCacheStore.java:138)
at org.infinispan.interceptors.CacheStoreInterceptor.prepareCacheLoader(CacheStoreInterceptor.java:263)
at org.infinispan.interceptors.CacheStoreInterceptor.visitPrepareCommand(CacheStoreInterceptor.java:177)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.base.CommandInterceptor.invokeNextInterceptor(CommandInterceptor.java:119)
at org.infinispan.interceptors.base.CommandInterceptor.handleDefault(CommandInterceptor.java:133)
at org.infinispan.commands.AbstractVisitor.visitPrepareCommand(AbstractVisitor.java:113)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.base.CommandInterceptor.invokeNextInterceptor(CommandInterceptor.java:119)
at org.infinispan.interceptors.EntryWrappingInterceptor.visitPrepareCommand(EntryWrappingInterceptor.java:74)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.base.CommandInterceptor.invokeNextInterceptor(CommandInterceptor.java:119)
at org.infinispan.interceptors.locking.AbstractTxLockingInterceptor.invokeNextAndCommitIf1Pc(AbstractTxLockingInterceptor.java:100)
at org.infinispan.interceptors.locking.OptimisticLockingInterceptor.visitPrepareCommand(OptimisticLockingInterceptor.java:98)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.base.CommandInterceptor.invokeNextInterceptor(CommandInterceptor.java:119)
at org.infinispan.interceptors.NotificationInterceptor.visitPrepareCommand(NotificationInterceptor.java:49)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.base.CommandInterceptor.invokeNextInterceptor(CommandInterceptor.java:119)
at org.infinispan.interceptors.base.CommandInterceptor.handleDefault(CommandInterceptor.java:133)
at org.infinispan.commands.AbstractVisitor.visitPrepareCommand(AbstractVisitor.java:113)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.base.CommandInterceptor.invokeNextInterceptor(CommandInterceptor.java:119)
at org.infinispan.interceptors.TxInterceptor.visitPrepareCommand(TxInterceptor.java:104)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.base.CommandInterceptor.invokeNextInterceptor(CommandInterceptor.java:119)
at org.infinispan.interceptors.StateTransferLockInterceptor.handleWithRetries(StateTransferLockInterceptor.java:181)
at org.infinispan.interceptors.StateTransferLockInterceptor.visitPrepareCommand(StateTransferLockInterceptor.java:62)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.base.CommandInterceptor.invokeNextInterceptor(CommandInterceptor.java:119)
at org.infinispan.interceptors.base.CommandInterceptor.handleDefault(CommandInterceptor.java:133)
at org.infinispan.commands.AbstractVisitor.visitPrepareCommand(AbstractVisitor.java:113)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.base.CommandInterceptor.invokeNextInterceptor(CommandInterceptor.java:119)
at org.infinispan.interceptors.InvocationContextInterceptor.handleAll(InvocationContextInterceptor.java:107)
at org.infinispan.interceptors.InvocationContextInterceptor.handleDefault(InvocationContextInterceptor.java:67)
at org.infinispan.commands.AbstractVisitor.visitPrepareCommand(AbstractVisitor.java:113)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.base.CommandInterceptor.invokeNextInterceptor(CommandInterceptor.java:119)
at org.infinispan.interceptors.base.CommandInterceptor.handleDefault(CommandInterceptor.java:133)
at org.infinispan.commands.AbstractVisitor.visitPrepareCommand(AbstractVisitor.java:113)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.base.CommandInterceptor.invokeNextInterceptor(CommandInterceptor.java:119)
at org.infinispan.interceptors.BatchingInterceptor.handleDefault(BatchingInterceptor.java:77)
at org.infinispan.commands.AbstractVisitor.visitPrepareCommand(AbstractVisitor.java:113)
at org.infinispan.commands.tx.PrepareCommand.acceptVisitor(PrepareCommand.java:130)
at org.infinispan.interceptors.InterceptorChain.invoke(InterceptorChain.java:318)
at org.infinispan.transaction.TransactionCoordinator.commit(TransactionCoordinator.java:159)
at org.infinispan.transaction.synchronization.SynchronizationAdapter.afterCompletion(SynchronizationAdapter.java:83)
at org.infinispan.transaction.tm.DummyTransaction.notifyAfterCompletion(DummyTransaction.java:266)
at org.infinispan.transaction.tm.DummyTransaction.runCommitTx(DummyTransaction.java:315)
at org.infinispan.transaction.tm.DummyTransaction.commit(DummyTransaction.java:84)
at org.infinispan.transaction.tm.DummyBaseTransactionManager.commit(DummyBaseTransactionManager.java:97)
at org.jboss.as.clustering.web.impl.TransactionBatchingManager.endBatch(TransactionBatchingManager.java:75)
at org.jboss.as.web.session.DistributableSessionManager.processSessionRepl(DistributableSessionManager.java:1525) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.jboss.as.web.session.DistributableSessionManager.storeSession(DistributableSessionManager.java:855) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.jboss.as.web.session.InstantSnapshotManager.snapshot(InstantSnapshotManager.java:45) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.jboss.as.web.session.ClusteredSessionValve.handleRequest(ClusteredSessionValve.java:131) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.jboss.as.web.session.ClusteredSessionValve.invoke(ClusteredSessionValve.java:89) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.jboss.as.web.session.JvmRouteValve.invoke(JvmRouteValve.java:88) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.jboss.as.web.session.LockingValve.invoke(LockingValve.java:56) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:151) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:155) [jbossweb-7.0.7.Final.jar:]
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) [jbossweb-7.0.7.Final.jar:]
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) [jbossweb-7.0.7.Final.jar:]
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:362) [jbossweb-7.0.7.Final.jar:]
at org.apache.coyote.http11.Http11AprProcessor.process(Http11AprProcessor.java:897) [jbossweb-7.0.7.Final.jar:]
at org.apache.coyote.http11.Http11AprProtocol$Http11ConnectionHandler.process(Http11AprProtocol.java:626) [jbossweb-7.0.7.Final.jar:]
at org.apache.tomcat.util.net.AprEndpoint$Worker.run(AprEndpoint.java:2033) [jbossweb-7.0.7.Final.jar:]
at java.lang.Thread.run(Thread.java:662) [:1.6.0_29]
Caused by: java.lang.ClassNotFoundException: org.jboss.as.clustering.web.infinispan.DistributedCacheManagerFactory$SessionKeyImpl from [Module "deployment.clusterbench-ee6.ear.clusterbench-ee6-web.war:main" from Service Module Loader]
at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:190)
at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:468)
at org.jboss.modules.ConcurrentClassLoader.performLoadClassChecked(ConcurrentClassLoader.java:456)
at org.jboss.modules.ConcurrentClassLoader.performLoadClassChecked(ConcurrentClassLoader.java:423)
at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:398)
at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:120)
at java.lang.Class.forName0(Native Method) [:1.6.0_29]
at java.lang.Class.forName(Class.java:247) [:1.6.0_29]
at org.jboss.marshalling.AbstractClassResolver.loadClass(AbstractClassResolver.java:135)
at org.jboss.marshalling.AbstractClassResolver.resolveClass(AbstractClassResolver.java:116)
at org.jboss.marshalling.river.RiverUnmarshaller.doReadClassDescriptor(RiverUnmarshaller.java:888)
at org.jboss.marshalling.river.RiverUnmarshaller.doReadNewObject(RiverUnmarshaller.java:1200)
at org.jboss.marshalling.river.RiverUnmarshaller.doReadObject(RiverUnmarshaller.java:272)
at org.jboss.marshalling.river.RiverUnmarshaller.doReadObject(RiverUnmarshaller.java:209)
at org.jboss.marshalling.AbstractObjectInput.readObject(AbstractObjectInput.java:37)
at org.infinispan.marshall.jboss.AbstractJBossMarshaller.objectFromObjectStream(AbstractJBossMarshaller.java:120)
at org.infinispan.marshall.VersionAwareMarshaller.objectFromByteBuffer(VersionAwareMarshaller.java:115)
at org.infinispan.marshall.AbstractMarshaller.objectFromByteBuffer(AbstractMarshaller.java:90)
at org.infinispan.marshall.AbstractDelegatingMarshaller.objectFromByteBuffer(AbstractDelegatingMarshaller.java:74)
at org.infinispan.marshall.MarshalledValue.deserialize0(MarshalledValue.java:147)
... 78 more
13:47:11,368 ERROR [org.infinispan.transaction.tm.DummyTransaction] (http-rhusar.brq.redhat.com-10.34.3.13-8080-1) ISPN000111: afterCompletion() failed for SynchronizationAdapter{localTransaction=LocalTransaction{remoteLockedNodes=null, isMarkedForRollback=false, transaction=DummyTransaction{xid=DummyXid{, globalTransactionId = ByteArray{size=64, array=0xd5b59a86ad98a889..}, branchQualifier = ByteArray{size=64, array=0xf8c9adf797b084f7..}}, status=3}, lockedKeys=null, backupKeyLocks=null, viewId=0} org.infinispan.transaction.synchronization.SyncLocalTransaction@2} org.infinispan.transaction.synchronization.SynchronizationAdapter@21: org.infinispan.CacheException: Could not commit.
at org.infinispan.transaction.synchronization.SynchronizationAdapter.afterCompletion(SynchronizationAdapter.java:85)
at org.infinispan.transaction.tm.DummyTransaction.notifyAfterCompletion(DummyTransaction.java:266)
at org.infinispan.transaction.tm.DummyTransaction.runCommitTx(DummyTransaction.java:315)
at org.infinispan.transaction.tm.DummyTransaction.commit(DummyTransaction.java:84)
at org.infinispan.transaction.tm.DummyBaseTransactionManager.commit(DummyBaseTransactionManager.java:97)
at org.jboss.as.clustering.web.impl.TransactionBatchingManager.endBatch(TransactionBatchingManager.java:75)
at org.jboss.as.web.session.DistributableSessionManager.processSessionRepl(DistributableSessionManager.java:1525) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.jboss.as.web.session.DistributableSessionManager.storeSession(DistributableSessionManager.java:855) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.jboss.as.web.session.InstantSnapshotManager.snapshot(InstantSnapshotManager.java:45) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.jboss.as.web.session.ClusteredSessionValve.handleRequest(ClusteredSessionValve.java:131) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.jboss.as.web.session.ClusteredSessionValve.invoke(ClusteredSessionValve.java:89) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.jboss.as.web.session.JvmRouteValve.invoke(JvmRouteValve.java:88) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.jboss.as.web.session.LockingValve.invoke(LockingValve.java:56) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:151) [jboss-as-web-7.1.0.Final-SNAPSHOT.jar:7.1.0.Final-SNAPSHOT]
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:155) [jbossweb-7.0.7.Final.jar:]
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) [jbossweb-7.0.7.Final.jar:]
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) [jbossweb-7.0.7.Final.jar:]
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:362) [jbossweb-7.0.7.Final.jar:]
at org.apache.coyote.http11.Http11AprProcessor.process(Http11AprProcessor.java:897) [jbossweb-7.0.7.Final.jar:]
at org.apache.coyote.http11.Http11AprProtocol$Http11ConnectionHandler.process(Http11AprProtocol.java:626) [jbossweb-7.0.7.Final.jar:]
at org.apache.tomcat.util.net.AprEndpoint$Worker.run(AprEndpoint.java:2033) [jbossweb-7.0.7.Final.jar:]
at java.lang.Thread.run(Thread.java:662) [:1.6.0_29]
Caused by: javax.transaction.xa.XAException
at org.infinispan.transaction.TransactionCoordinator.handleCommitFailure(TransactionCoordinator.java:200)
at org.infinispan.transaction.TransactionCoordinator.commit(TransactionCoordinator.java:161)
at org.infinispan.transaction.synchronization.SynchronizationAdapter.afterCompletion(SynchronizationAdapter.java:83)
... 21 more
{noformat}
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
12 years, 6 months
[JBoss JIRA] Created: (AS7-1652) Basic operation validation operation
by Brian Stansberry (JIRA)
Basic operation validation operation
------------------------------------
Key: AS7-1652
URL: https://issues.jboss.org/browse/AS7-1652
Project: Application Server 7
Issue Type: Feature Request
Components: Domain Management
Reporter: Brian Stansberry
Fix For: 7.1.0.CR1
An operation to perform basic validation of another operation, as described in EAP.01510, "Validation of configuration changes will be performed at a number of levels - at the command line, the GUI the API and as an implicit validation command from any administration agent."
This should be a simple check for required parameters and a basic check for type convertibility.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
12 years, 6 months
[JBoss JIRA] (AS7-3162) RESTEasy: Unknown servet name javax.ws.rs.core.Application when javax.ws.rs.core.Application subclass is on classpath
by Pavel Janousek (Moved) (JIRA)
[ https://issues.jboss.org/browse/AS7-3162?page=com.atlassian.jira.plugin.s... ]
Pavel Janousek moved JBPAPP-7833 to AS7-3162:
---------------------------------------------
Project: Application Server 7 (was: JBoss Enterprise Application Platform)
Key: AS7-3162 (was: JBPAPP-7833)
Workflow: GIT Pull Request workflow (was: jira)
Affects Version/s: 7.1.0.CR1b
(was: EAP 6.0.0 DR 11)
Component/s: REST
(was: RESTEasy)
Security: (was: JBoss Internal)
Docs QE Status: (was: NEW)
> RESTEasy: Unknown servet name javax.ws.rs.core.Application when javax.ws.rs.core.Application subclass is on classpath
> ----------------------------------------------------------------------------------------------------------------------
>
> Key: AS7-3162
> URL: https://issues.jboss.org/browse/AS7-3162
> Project: Application Server 7
> Issue Type: Bug
> Components: REST
> Affects Versions: 7.1.0.CR1b
> Reporter: Pavel Janousek
> Assignee: Weinan Li
> Priority: Blocker
>
> I've deployment like this:
> {code}
> @Deployment
> public static Archive<?> deploy() {
> WebArchive war = ShrinkWrap.create(WebArchive.class, "jaxrsnoap.war");
> war.addPackage(HttpRequest.class.getPackage());
> war.addClasses(ApplicationTestCase.class, ApplicationInvalid1.class);
> war.addAsWebInfResource(
> WebXml.get("<servlet-mapping>\n"
> + " <servlet-name>javax.ws.rs.core.Application</servlet-name>\n"
> + " <url-pattern>/myjaxrs/*</url-pattern>\n"
> + "</servlet-mapping>\n" + "\n"), "web.xml");
> return war;
> }
> {code}
> This deployment fails during deploying because of "Context [/jaxrsnoap] startup failed due to previous errors: java.lang.IllegalArgumentException: Servlet mapping specifies an unknown servlet name javax.ws.rs.core.Application"
> ApplicationInvalid1 is empty subclass of javax.ws.rs.core.Application like:
> {code}
> public class ApplicationInvalid1 extends Application {
> private Set<Class<?>> classes = new HashSet<Class<?>>();
> public ApplicationInvalid1() {
> }
> @Override
> public Set<Class<?>> getClasses() {
> return classes;
> }
> }
> {code}
> There isn't any reference to this class in web.xml or somewhere else. Only class is placed on classpath. If I remove this class from deployment (= change appropriate line to "war.addClasses(ApplicationTestCase.class);", everything will be OK.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
12 years, 6 months
[JBoss JIRA] Created: (AS7-1230) Exception during message inflow is not properly logged
by Carlo de Wolf (JIRA)
Exception during message inflow is not properly logged
------------------------------------------------------
Key: AS7-1230
URL: https://issues.jboss.org/browse/AS7-1230
Project: Application Server 7
Issue Type: Bug
Reporter: Carlo de Wolf
Fix For: 7.1.0.CR1
{noformat}
11:56:03,323 ERROR [stderr] (jca-short-running-threads-threads - 2) java.lang.IllegalStateException: No component instance associated
11:56:03,323 ERROR [stderr] (jca-short-running-threads-threads - 2) at org.jboss.as.ee.component.ViewDescription$ComponentDispatcherInterceptor.processInvocation(ViewDescription.java:196)
11:56:03,324 ERROR [stderr] (jca-short-running-threads-threads - 2) at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:287)
11:56:03,324 ERROR [stderr] (jca-short-running-threads-threads - 2) at org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61)
11:56:03,324 ERROR [stderr] (jca-short-running-threads-threads - 2) at org.jboss.as.ee.component.ViewDescription$1.processInvocation(ViewDescription.java:146)
11:56:03,324 ERROR [stderr] (jca-short-running-threads-threads - 2) at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:287)
11:56:03,324 ERROR [stderr] (jca-short-running-threads-threads - 2) at org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61)
11:56:03,324 ERROR [stderr] (jca-short-running-threads-threads - 2) at org.jboss.as.ee.component.ProxyInvocationHandler.invoke(ProxyInvocationHandler.java:76)
11:56:03,324 ERROR [stderr] (jca-short-running-threads-threads - 2) at org.jboss.as.demos.ejb3.rar.PostmanPat$$$view17.deliver(Unknown Source)
11:56:03,325 ERROR [stderr] (jca-short-running-threads-threads - 2) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
11:56:03,325 ERROR [stderr] (jca-short-running-threads-threads - 2) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
11:56:03,325 ERROR [stderr] (jca-short-running-threads-threads - 2) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
11:56:03,325 ERROR [stderr] (jca-short-running-threads-threads - 2) at java.lang.reflect.Method.invoke(Method.java:597)
11:56:03,325 ERROR [stderr] (jca-short-running-threads-threads - 2) at org.jboss.as.ejb3.inflow.MessageEndpointInvocationHandler.doInvoke(MessageEndpointInvocationHandler.java:140)
11:56:03,325 ERROR [stderr] (jca-short-running-threads-threads - 2) at org.jboss.as.ejb3.inflow.AbstractInvocationHandler.invoke(AbstractInvocationHandler.java:73)
11:56:03,325 ERROR [stderr] (jca-short-running-threads-threads - 2) at $Proxy19.deliver(Unknown Source)
11:56:03,326 ERROR [stderr] (jca-short-running-threads-threads - 2) at org.jboss.as.demos.ejb3.rar.SimpleQueueResourceAdapter.process(SimpleQueueResourceAdapter.java:112)
11:56:03,326 ERROR [stderr] (jca-short-running-threads-threads - 2) at org.jboss.as.demos.ejb3.rar.SimpleQueueResourceAdapter.access$000(SimpleQueueResourceAdapter.java:51)
11:56:03,326 ERROR [stderr] (jca-short-running-threads-threads - 2) at org.jboss.as.demos.ejb3.rar.SimpleQueueResourceAdapter$1.run(SimpleQueueResourceAdapter.java:79)
11:56:03,326 ERROR [stderr] (jca-short-running-threads-threads - 2) at org.jboss.jca.core.workmanager.WorkWrapper.run(WorkWrapper.java:211)
11:56:03,326 ERROR [stderr] (jca-short-running-threads-threads - 2) at org.jboss.threads.SimpleDirectExecutor.execute(SimpleDirectExecutor.java:33)
11:56:03,327 ERROR [stderr] (jca-short-running-threads-threads - 2) at org.jboss.threads.QueueExecutor.runTask(QueueExecutor.java:801)
11:56:03,327 ERROR [stderr] (jca-short-running-threads-threads - 2) at org.jboss.threads.QueueExecutor.access$100(QueueExecutor.java:45)
11:56:03,327 ERROR [stderr] (jca-short-running-threads-threads - 2) at org.jboss.threads.QueueExecutor$Worker.run(QueueExecutor.java:821)
11:56:03,327 ERROR [stderr] (jca-short-running-threads-threads - 2) at java.lang.Thread.run(Thread.java:662)
11:56:03,327 ERROR [stderr] (jca-short-running-threads-threads - 2) at org.jboss.threads.JBossThread.run(JBossThread.java:122)
{noformat}
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
12 years, 6 months
[JBoss JIRA] (AS7-2559) Make HibernateAnnotationScanning more lenient in handling annotated entities
by Marius Bogoevici (Created) (JIRA)
Make HibernateAnnotationScanning more lenient in handling annotated entities
----------------------------------------------------------------------------
Key: AS7-2559
URL: https://issues.jboss.org/browse/AS7-2559
Project: Application Server 7
Issue Type: Bug
Affects Versions: 7.1.0.Alpha1
Reporter: Marius Bogoevici
Assignee: Marius Bogoevici
Fix For: 7.1.0.Beta1
Frameworks such as Spring Roo may place @Entity annotations via bytecode manipulation (since compilation is impossible) on methods, as in:
{code}
@Aspect
@ajcPrivileged
public class Owner_Roo_Entity
{
....
@Entity
@ajcDeclareAnnotation(pattern="com.springsource.petclinic.domain.Owner", annotation="@Entity", kind="at_type")
void ajc$declare_at_type_1()
{
}
....
}
{code}
This causes HibernateAnnotationScanner to crash with a CNFE on 'ajc$declare_at_type_1'.
Solution: make HibernateAnnotationScanner ignore these
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
12 years, 6 months
[JBoss JIRA] (AS7-2994) Wrong exception RollesAllowed constraint is not fulfilled
by Jan Lanik (Created) (JIRA)
Wrong exception RollesAllowed constraint is not fulfilled
---------------------------------------------------------
Key: AS7-2994
URL: https://issues.jboss.org/browse/AS7-2994
Project: Application Server 7
Issue Type: Bug
Components: EJB
Affects Versions: 7.1.0.Beta1b
Environment: If you have a SB with a method annotated with RollesAllowed({a,b,c}) and a SFSB which injects this bean. We also have client tries to access a method which calls a restricted method on injected bean. This client does not possess a security role specified in RolesAllowed , so the call should be rejected with EJBAccessException. However, what I get is NoSuchEjbException.
Notes:
- this doesn't happen if there is only one security role in RollesAllowed
- this doesn't happen if the bean is injected to SLSB
- the NoSuchElement exception is thrown by org.jboss.as.ejb3.component.stateful.StatefulComponentInstanceInterceptor:66 snipplet follows:
ROOT_LOGGER.debug("Looking for stateful component instance with session id: " + sessionId);
StatefulSessionComponentInstance instance = component.getCache().get(sessionId);
if (instance == null) {
//This exception will be transformed into the correct exception type by the exception transforming interceptor
throw new NoSuchEJBException("Could not find SFSB " + component.getComponentName() + " with " + sessionId);
}
- I'll provide a reproducer for this, it' ll be available in my git repo (https://github.com/jlanik/jboss-as), branch EJBSecurity
classes: InjectionAnnSFSBtoSFSBTestCase, InjectionAnnSLSBtoSFSBTestCase
you can also look at InjectionAnnSFSBtoSLSBTestCase InjectionAnnSLSBtoSLSBTestCase (which work ok)
I'll create a pull request with this and some other tests, so hopefully, It'll be accessible in the main jboss-as repo soon.
Reporter: Jan Lanik
Assignee: jaikiran pai
Fix For: 7.1.0.CR1
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
12 years, 6 months