[jboss-jira] [JBoss JIRA] (JBWEB-282) Lack of synchronization in org.apache.catalina.security.SecurityUtil
RH Bugzilla Integration (JIRA)
jira-events at lists.jboss.org
Tue Nov 19 05:59:07 EST 2013
[ https://issues.jboss.org/browse/JBWEB-282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12924806#comment-12924806 ]
RH Bugzilla Integration commented on JBWEB-282:
-----------------------------------------------
Rémy Maucherat <rmaucher at redhat.com> made a comment on [bug 1022634|https://bugzilla.redhat.com/show_bug.cgi?id=1022634]
Some clarification.
Web 7.3 is a copy of the 7.2 branch (which is for EAP 6.1) with no additional changes, for EAP 6.2 maintenance if needed.
Web 7.4 is for EAP 6.3 (websockets + Servlet 3.1 upgrade).
> Lack of synchronization in org.apache.catalina.security.SecurityUtil
> --------------------------------------------------------------------
>
> Key: JBWEB-282
> URL: https://issues.jboss.org/browse/JBWEB-282
> Project: JBoss Web
> Issue Type: Bug
> Security Level: Public(Everyone can see)
> Components: Tomcat
> Affects Versions: JBossWeb-7.0.16.GA, JBossWeb-7.2.1.GA
> Environment: -JBoss EAP 6.1.1
> Reporter: Aaron Ogburn
> Assignee: Remy Maucherat
> Fix For: JBossWeb-7.3.0.GA
>
>
> The unsynchronized objectCache in org.apache.catalina.security.SecurityUtil can cause jboss start up and application deployments to spin on concurrent hash map access. Fixed already upstream in tomcat:
> https://issues.apache.org/bugzilla/show_bug.cgi?id=50138
> objectCache now needs to be a ConcurrentHashMap given our multithreaded starts.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
More information about the jboss-jira
mailing list