[
https://issues.apache.org/jira/browse/FILEUPLOAD-189?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13506382#comment-13506382
]
Shinya Nishinaka commented on FILEUPLOAD-189:
---------------------------------------------
I think this issue Critical , too.
If the lifecycle of DiskFileItemFactory object is shorter than DiskFileItem,
There is a possibility that the temporary files are deleted before
DiskFileItem#getInputStream() is called.
This causes upload files will be lost.
> DiskFileItemFactory use of FileCleaningTracker is documated or coded wrong
> --------------------------------------------------------------------------
>
> Key: FILEUPLOAD-189
> URL: https://issues.apache.org/jira/browse/FILEUPLOAD-189
> Project: Commons FileUpload
> Issue Type: Bug
> Reporter: Gregor K
> Priority: Minor
> Attachments: FILEUPLOAD-189.patch
>
> Original Estimate: 1h
> Remaining Estimate: 1h
>
> Regarding latest SVN revision:
> The DiskFileItemFactory documents:
> Temporary files are automatically deleted as soon as they are no longer
> needed. (More precisely, when the corresponding instance of {@link
> java.io.File} is garbage collected.)
> But the code in DiskFileItemFactory.createItem() is doing:
> tracker.track(result.getTempFile(), this);
> Which means the file is cleaned when DiskFileItemFactory is garbage collected.
> This error is propably introduced in Rev 578253 when the code was moved from
> DiskFileItem to DiskFileItemFactory, without changing "this" (which was
> DiskFileItem) and is not DiskFileItemFactory.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
