[jboss-jira] [JBoss JIRA] (JBWEB-282) Lack of synchronization in org.apache.catalina.security.SecurityUtil

[Aaron Ogburn (JIRA)]

Aaron Ogburn created JBWEB-282:
----------------------------------

             Summary: Lack of synchronization in org.apache.catalina.security.SecurityUtil
                 Key: JBWEB-282
                 URL: https://issues.jboss.org/browse/JBWEB-282
             Project: JBoss Web
          Issue Type: Bug
      Security Level: Public (Everyone can see)
          Components: Tomcat
    Affects Versions: JBossWeb-7.2.1.GA, JBossWeb-7.0.16.GA
         Environment: -JBoss EAP 6.1.1
            Reporter: Aaron Ogburn
            Assignee: Remy Maucherat


The unsynchronized objectCache in org.apache.catalina.security.SecurityUtil can cause jboss start up and application deployments to spin on concurrent hash map access. Fixed already upstream in tomcat:

https://issues.apache.org/bugzilla/show_bug.cgi?id=50138

objectCache now needs to be a ConcurrentHashMap given our multithreaded starts.


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira