[jboss-jira] [JBoss JIRA] (JBWEB-282) Lack of synchronization in org.apache.catalina.security.SecurityUtil

Lack of synchronization in org.apache.catalina.security.SecurityUtil -------------------------------------------------------------------- Key: JBWEB-282 URL: https://issues.jboss.org/browse/JBWEB-282 Project: JBoss Web Issue Type: Bug Security Level: Public(Everyone can see) Components: Tomcat Affects Versions: JBossWeb-7.0.16.GA, JBossWeb-7.2.1.GA Environment: -JBoss EAP 6.1.1 Reporter: Aaron Ogburn Assignee: Remy Maucherat Fix For: JBossWeb-7.3.0.GA The unsynchronized objectCache in org.apache.catalina.security.SecurityUtil can cause jboss start up and application deployments to spin on concurrent hash map access. Fixed already upstream in tomcat: https://issues.apache.org/bugzilla/show_bug.cgi?id=50138 objectCache now needs to be a ConcurrentHashMap given our multithreaded starts.