[
https://issues.apache.org/jira/browse/WSS-396?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13401928#comment-13401928
]
Lucas Madar commented on WSS-396:
---------------------------------
Here's the actual exception, when used via CXF in a Tomcat environment using
WS-Usernametoken:
java.util.ConcurrentModificationException
at java.util.HashMap$HashIterator.nextEntry(HashMap.java:793)
at java.util.HashMap$KeyIterator.next(HashMap.java:828)
at
org.apache.ws.security.cache.MemoryReplayCache.processTokenExpiry(MemoryReplayCache.java:89)
at
org.apache.ws.security.cache.MemoryReplayCache.contains(MemoryReplayCache.java:76)
at
org.apache.ws.security.processor.UsernameTokenProcessor.handleUsernameToken(UsernameTokenProcessor.java:139)
at
org.apache.ws.security.processor.UsernameTokenProcessor.handleToken(UsernameTokenProcessor.java:66)
at
org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:396)
at
org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:289)
> ConcurrentModificationException in MemoryReplayCache.processTokenExpiry
> -----------------------------------------------------------------------
>
> Key: WSS-396
> URL: https://issues.apache.org/jira/browse/WSS-396
> Project: WSS4J
> Issue Type: Bug
> Components: WSS4J Core
> Affects Versions: 1.6.6
> Reporter: Lucas Madar
> Assignee: Colm O hEigeartaigh
> Priority: Critical
> Attachments: cmefix.patch
>
>
> The processTokenExpiry function iterates through a set and, if things have
> expired, removes them from the same set it is iterating over. This throws a
> ConcurrentModificationException.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
