[jboss-jira] [JBoss JIRA] (SECURITY-777) Picketbox uses non-synchronized static maps

RH Bugzilla Integration (JIRA) issues at jboss.org
Mon Apr 9 21:31:00 EDT 2018


     [ https://issues.jboss.org/browse/SECURITY-777?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

RH Bugzilla Integration updated SECURITY-777:
---------------------------------------------
    Bugzilla References: https://bugzilla.redhat.com/show_bug.cgi?id=1565186, https://bugzilla.redhat.com/show_bug.cgi?id=1565325
        Bugzilla Update: Perform


> Picketbox uses non-synchronized static maps
> -------------------------------------------
>
>                 Key: SECURITY-777
>                 URL: https://issues.jboss.org/browse/SECURITY-777
>             Project: PicketBox 
>          Issue Type: Bug
>    Affects Versions: PicketBox_4_0_20.Beta2
>            Reporter: Stuart Douglas
>            Assignee: Stefan Guilhen
>             Fix For: PicketBox_4_0_20.Final
>
>         Attachments: picketlink.diff
>
>
> Picketbox uses quite a few static maps as global registries (yuck), and unfortunately they are not all thread safe, which can result in races as Wildfly starts security domains asynchronously. 
> Please see attached patch. 



--
This message was sent by Atlassian JIRA
(v7.5.0#75005)


More information about the jboss-jira mailing list