https://issues.apache.org/bugzilla/show_bug.cgi?id=55772
Bug ID: 55772
Summary: Flushing AsyncContext response writer after
ClientAbortException (BrokenPipe) causes request state
to leak
Product: Tomcat 7
Version: 7.0.42
Hardware: All
OS: Linux
Status: NEW
Severity: critical
Priority: P2
Component: Catalina
Assignee: [email protected]
Reporter: [email protected]
Created attachment 31040
--> https://issues.apache.org/bugzilla/attachment.cgi?id=31040&action=edit
Test case to reproduce request state (cookie) leakage
This issue is easily reproducible with the attached test case. Request state is
leaked between requests due to the ADAPTER_NOTES note on the coyote request
containing the catalina connector request (which holds the cookies from the
first request) and never gets cleaned up in this error case (and maybe others
similar to it).
It seems like it would be worthwhile to clear out the notes field from the
coyote request when we recycle() it to prevent future issues like this.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
