[Bug 55776] if path include relative char, eg: ../, classloader will not find zhe file

2013-11-15 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=55776 --- Comment #3 from Mark Thomas ma...@apache.org --- Again, which API is being calling and with what parameters? Without that information this bug is likely to be resolved as INVALID. -- You are receiving this mail because: You are the

[Bug 55776] if path include relative char, eg: ../, classloader will not find zhe file

2013-11-15 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=55776 --- Comment #4 from LabnizDirac labnizdi...@126.com --- WebClassLoader.getResource cause this problem,This is my example in jsp: % java.net.URL url = this.getClass().getClassLoader().getResource(/../classes/app.xml);

svn commit: r1542267 - in /tomcat/trunk: java/org/apache/catalina/connector/ java/org/apache/coyote/ java/org/apache/coyote/ajp/ java/org/apache/coyote/http11/ java/org/apache/coyote/spdy/ test/org/ap

2013-11-15 Thread markt
Author: markt Date: Fri Nov 15 13:39:52 2013 New Revision: 1542267 URL: http://svn.apache.org/r1542267 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=55772 Ensure that the request and response are recycled after an error during async processing. Modified:

svn commit: r1542269 - in /tomcat/tc7.0.x/trunk: ./ java/org/apache/catalina/connector/ java/org/apache/coyote/ java/org/apache/coyote/ajp/ java/org/apache/coyote/http11/ test/org/apache/coyote/http11

2013-11-15 Thread markt
Author: markt Date: Fri Nov 15 13:46:25 2013 New Revision: 1542269 URL: http://svn.apache.org/r1542269 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=55772 Ensure that the request and response are recycled after an error during async processing. Modified: tomcat/tc7.0.x/trunk/

[Bug 55772] Flushing AsyncContext response writer after ClientAbortException (BrokenPipe) causes request state to leak

2013-11-15 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=55772 Mark Thomas ma...@apache.org changed: What|Removed |Added Status|NEW |RESOLVED

[Bug 55776] if path include relative char, eg: ../, classloader will not find zhe file

2013-11-15 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=55776 Mark Thomas ma...@apache.org changed: What|Removed |Added Status|NEEDINFO|NEW --- Comment #5

buildbot retry in ASF Buildbot on tomcat-7-trunk

2013-11-15 Thread buildbot
The Buildbot has detected a new failure on builder tomcat-7-trunk while building ASF Buildbot. Full details are available at: http://ci.apache.org/builders/tomcat-7-trunk/builds/1550 Buildbot URL: http://ci.apache.org/ Buildslave for this Build: bb-vm_ubuntu Build Reason: scheduler Build

svn commit: r1542284 - /tomcat/trunk/java/org/apache/catalina/webresources/StandardRoot.java

2013-11-15 Thread markt
Author: markt Date: Fri Nov 15 15:04:52 2013 New Revision: 1542284 URL: http://svn.apache.org/r1542284 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=55776 Normalize resource requests before processing them. Modified:

svn commit: r1542286 - /tomcat/trunk/java/org/apache/catalina/core/ApplicationContext.java

2013-11-15 Thread markt
Author: markt Date: Fri Nov 15 15:09:09 2013 New Revision: 1542286 URL: http://svn.apache.org/r1542286 Log: Normlization is now handled by the WebResourceRoot Modified: tomcat/trunk/java/org/apache/catalina/core/ApplicationContext.java Modified:

[Bug 55776] if path include relative char, eg: ../, classloader will not find zhe file

2013-11-15 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=55776 Mark Thomas ma...@apache.org changed: What|Removed |Added Status|NEW |RESOLVED

buildbot success in ASF Buildbot on tomcat-7-trunk

2013-11-15 Thread buildbot
The Buildbot has detected a restored build on builder tomcat-7-trunk while building ASF Buildbot. Full details are available at: http://ci.apache.org/builders/tomcat-7-trunk/builds/1551 Buildbot URL: http://ci.apache.org/ Buildslave for this Build: bb-vm_ubuntu Build Reason: scheduler Build

buildbot failure in ASF Buildbot on tomcat-trunk

2013-11-15 Thread buildbot
The Buildbot has detected a new failure on builder tomcat-trunk while building ASF Buildbot. Full details are available at: http://ci.apache.org/builders/tomcat-trunk/builds/5218 Buildbot URL: http://ci.apache.org/ Buildslave for this Build: bb-vm_ubuntu Build Reason: scheduler Build Source

svn commit: r1542334 - /tomcat/trunk/test/org/apache/catalina/webresources/AbstractTestResourceSet.java

2013-11-15 Thread markt
Author: markt Date: Fri Nov 15 17:17:01 2013 New Revision: 1542334 URL: http://svn.apache.org/r1542334 Log: Take account of WebResourceRoot being stricter with traversal attempts. Modified: tomcat/trunk/test/org/apache/catalina/webresources/AbstractTestResourceSet.java Modified:

svn commit: r1542336 - /tomcat/trunk/test/org/apache/catalina/loader/TestVirtualContext.java

2013-11-15 Thread markt
Author: markt Date: Fri Nov 15 17:20:37 2013 New Revision: 1542336 URL: http://svn.apache.org/r1542336 Log: Fix test now checking in getResource is stricter Modified: tomcat/trunk/test/org/apache/catalina/loader/TestVirtualContext.java Modified:

svn commit: r1542339 - in /tomcat/trunk: java/org/apache/catalina/realm/JNDIRealm.java webapps/docs/config/realm.xml

2013-11-15 Thread markt
Author: markt Date: Fri Nov 15 17:39:05 2013 New Revision: 1542339 URL: http://svn.apache.org/r1542339 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=55778 Make value used for javax.security.sasl.qop with SPNEGO configurable. Modified:

Re: Late Binding

2013-11-15 Thread Suresh Mathew
On Mon, Nov 11, 2013 at 11:08 AM, Suresh Mathew suresh@gmail.comwrote: On Mon, Nov 11, 2013 at 9:32 AM, Konstantin Kolinko knst.koli...@gmail.com wrote: 2013/11/11 Suresh Mathew suresh@gmail.com: Got it Konstantin, Thank you... But stopping and starting would mean that we

svn commit: r1542362 - in /tomcat/tc7.0.x/trunk: ./ java/org/apache/catalina/realm/JNDIRealm.java webapps/docs/changelog.xml webapps/docs/config/realm.xml

2013-11-15 Thread markt
Author: markt Date: Fri Nov 15 18:30:13 2013 New Revision: 1542362 URL: http://svn.apache.org/r1542362 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=55778 Make value used for javax.security.sasl.qop with SPNEGO configurable. Modified: tomcat/tc7.0.x/trunk/ (props changed)

[Bug 55778] JNDIRealm: Authentication with GSSAPI to LDAP with SSL connection causes an exception

2013-11-15 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=55778 Mark Thomas ma...@apache.org changed: What|Removed |Added Status|NEW |RESOLVED

Rough plan for Tomcat 8

2013-11-15 Thread Mark Thomas
The major refactorings planned for 8.0.x are complete. There are a few minor refactorings that can either done before the first stable release or (if they turn out to be a little bigger) left until 9.0.x. Therefore I have the following tentative plan in mind: - start the next 8.0.x RC release

svn commit: r1542366 - /tomcat/trunk/TOMCAT-NEXT.txt

2013-11-15 Thread markt
Author: markt Date: Fri Nov 15 18:56:57 2013 New Revision: 1542366 URL: http://svn.apache.org/r1542366 Log: Update Modified: tomcat/trunk/TOMCAT-NEXT.txt Modified: tomcat/trunk/TOMCAT-NEXT.txt URL:

buildbot success in ASF Buildbot on tomcat-trunk

2013-11-15 Thread buildbot
The Buildbot has detected a restored build on builder tomcat-trunk while building ASF Buildbot. Full details are available at: http://ci.apache.org/builders/tomcat-trunk/builds/5219 Buildbot URL: http://ci.apache.org/ Buildslave for this Build: bb-vm_ubuntu Build Reason: scheduler Build

[Bug 55776] if path include relative char, eg: ../, classloader will not find zhe file

2013-11-15 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=55776 Konstantin Kolinko knst.koli...@gmail.com changed: What|Removed |Added Status|RESOLVED

[Bug 55776] if path include relative char, eg: ../, classloader will not find zhe file

2013-11-15 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=55776 --- Comment #8 from Konstantin Kolinko knst.koli...@gmail.com --- Created attachment 31047 -- https://issues.apache.org/bugzilla/attachment.cgi?id=31047action=edit Test.java. Demo for ClassLoader.getResource(). -- You are receiving this

Re: Rough plan for Tomcat 8

2013-11-15 Thread Rémy Maucherat
2013/11/15 Mark Thomas ma...@apache.org The major refactorings planned for 8.0.x are complete. There are a few minor refactorings that can either done before the first stable release or (if they turn out to be a little bigger) left until 9.0.x. Cool. Since there was never a 7.1, I suppose

Re: svn commit: r1542339 - in /tomcat/trunk: java/org/apache/catalina/realm/JNDIRealm.java webapps/docs/config/realm.xml

2013-11-15 Thread Konstantin Kolinko
Wrong spelling of the property name. s/spengo/spnego/ Regarding documentation (realm.xml): Maybe add a notice on what QOP stands for, Quality of Protection. (It is not the first result in Google, though). http://docs.oracle.com/javase/7/docs/api/javax/security/sasl/Sasl.html#QOP

svn commit: r1542387 - /tomcat/trunk/TOMCAT-NEXT.txt

2013-11-15 Thread markt
Author: markt Date: Fri Nov 15 20:40:05 2013 New Revision: 1542387 URL: http://svn.apache.org/r1542387 Log: Trailing whitespace Modified: tomcat/trunk/TOMCAT-NEXT.txt Modified: tomcat/trunk/TOMCAT-NEXT.txt URL:

Re: Rough plan for Tomcat 8

2013-11-15 Thread Mark Thomas
Rémy Maucherat r...@apache.org wrote: 2013/11/15 Mark Thomas ma...@apache.org The major refactorings planned for 8.0.x are complete. There are a few minor refactorings that can either done before the first stable release or (if they turn out to be a little bigger) left until 9.0.x. Cool.

[Bug 55776] if path include relative char, eg: ../, classloader will not find zhe file

2013-11-15 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=55776 --- Comment #9 from Mark Thomas ma...@apache.org --- Point taken with respect to the standard class loader implementation but you also have to look at how 7.0.x behaved. 7.0.x allowed /../ and /./ sequences. It also allowed stepping outside