[jboss-jira] [JBoss JIRA] (JBWEB-282) Lack of synchronization in org.apache.catalina.security.SecurityUtil

[RH Bugzilla Integration (JIRA)]

    [ https://issues.jboss.org/browse/JBWEB-282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12980259#comment-12980259 ] 

RH Bugzilla Integration commented on JBWEB-282:
-----------------------------------------------

mark yarborough <myarboro at redhat.com> changed the Status of [bug 1050225|https://bugzilla.redhat.com/show_bug.cgi?id=1050225] from VERIFIED to CLOSED

> Lack of synchronization in org.apache.catalina.security.SecurityUtil
> --------------------------------------------------------------------
>
>                 Key: JBWEB-282
>                 URL: https://issues.jboss.org/browse/JBWEB-282
>             Project: JBoss Web
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: Tomcat
>    Affects Versions: JBossWeb-7.0.16.GA, JBossWeb-7.2.1.GA
>         Environment: -JBoss EAP 6.1.1
>            Reporter: Aaron Ogburn
>            Assignee: Remy Maucherat
>             Fix For: JBossWeb-7.3.0.GA
>
>
> The unsynchronized objectCache in org.apache.catalina.security.SecurityUtil can cause jboss start up and application deployments to spin on concurrent hash map access. Fixed already upstream in tomcat:
> https://issues.apache.org/bugzilla/show_bug.cgi?id=50138
> objectCache now needs to be a ConcurrentHashMap given our multithreaded starts.



--
This message was sent by Atlassian JIRA
(v6.2.6#6264)