kali834x opened a new pull request, #1313:
URL: https://github.com/apache/axis-axis2-java-core/pull/1313

   **Request host written into the shared AxisService during WSDL generation**
   `WSDLDataLocator.outputInlineForm` hands the requester's address to 
`AxisService2WSDL11` by storing it in `AxisService.endpointURL`, a field every 
request on the deployed service shares, and `MexMessageReceiver` stores the 
inbound `wsa:To` there verbatim. `getEndpointURL` reads the host back out of 
that field for each `soap:address`, so two concurrent `?wsdl` fetches race on 
it and one client's Host header lands in the WSDL another client receives (9 of 
800 in a two-thread reproducer), and a GetMetadata request leaves its `To` on 
the service for later generations. The address now travels with the generator 
for that one request; the `hostname` parameter and `modifyUserWSDLPortAddress` 
behave as before. The kernel test fails before the change.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to