https://issues.apache.org/bugzilla/show_bug.cgi?id=49686
--- Comment #2 from Christopher Schultz <ch...@christopherschultz.net> --- (In reply to comment #1) > This issue is an instance of > <https://www.securecoding.cert.org/confluence/x/j4CBAg> and is still not > fixed > <http://svn.apache.org/repos/asf/!svn/bc/1435416/tomcat/trunk/modules/tomcat- > lite/java/org/apache/tomcat/lite/io/SocketConnector.java>. Has anyone > reviewed this issue? Is there any reason for not fixing it? The reason nobody is fixing it is because Tomcat-lite has essentially been abandoned: it hasn't seen development in several years and it never had any official release. Is there any particular reason you think this ought to be fixed? Or does publicly-accessible code with a coding error just make your skin crawl? -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
