[Bug 57420] Wrong class names generated since URL_ENCODER in DirContextURLConnection is not thread safe

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57420 --- Comment #6 from Violeta Georgieva --- (In reply to Konstantin Kolinko from comment #4) > 1) As far as I see, UDecoder does not have any fields and thus is > thread-safe. > > The thread safety is not documented, though. > > As such, I

Re: svn commit: r1653183 - in /tomcat/trunk/java/org/apache/catalina/tribes/tipis: AbstractReplicatedMap.java LazyReplicatedMap.java ReplicatedMap.java

2015-01-19 Thread Keiichi Fujino
2015-01-20 14:39 GMT+09:00 Felix Schumacher < felix.schumac...@internetallee.de>: > > > Am 20. Januar 2015 03:23:22 MEZ, schrieb kfuj...@apache.org: > >Author: kfujino > >Date: Tue Jan 20 02:23:21 2015 > >New Revision: 1653183 > > > >URL: http://svn.apache.org/r1653183 > >Log: > >ReplicatedMap sho

svn commit: r1653198 - in /tomcat/trunk/java/org/apache/catalina/tribes/tipis: AbstractReplicatedMap.java LazyReplicatedMap.java ReplicatedMap.java

2015-01-19 Thread kfujino
Author: kfujino Date: Tue Jan 20 05:58:32 2015 New Revision: 1653198 URL: http://svn.apache.org/r1653198 Log: Fix typos. Modified: tomcat/trunk/java/org/apache/catalina/tribes/tipis/AbstractReplicatedMap.java tomcat/trunk/java/org/apache/catalina/tribes/tipis/LazyReplicatedMap.java t

Re: svn commit: r1653183 - in /tomcat/trunk/java/org/apache/catalina/tribes/tipis: AbstractReplicatedMap.java LazyReplicatedMap.java ReplicatedMap.java

2015-01-19 Thread Felix Schumacher
Am 20. Januar 2015 03:23:22 MEZ, schrieb kfuj...@apache.org: >Author: kfujino >Date: Tue Jan 20 02:23:21 2015 >New Revision: 1653183 > >URL: http://svn.apache.org/r1653183 >Log: >ReplicatedMap should send the Copy message when replicating. > >Modified: >tomcat/trunk/java/org/apache/catalina/tribe

svn commit: r1653193 - in /tomcat/trunk/java/org/apache/catalina/tribes/tipis: AbstractReplicatedMap.java ReplicatedMap.java

2015-01-19 Thread kfujino
Author: kfujino Date: Tue Jan 20 04:54:05 2015 New Revision: 1653193 URL: http://svn.apache.org/r1653193 Log: Fix behavior of ReplicatedMap when member has disappeared. If map entry is primary, rebuild the backup members. If primary node of map entry has disappeared, backup node is promoted to pr

[GUMP@vmgump]: Project tomcat-trunk-test-apr (in module tomcat-trunk) failed

2015-01-19 Thread Bill Barker
To whom it may engage... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact the folk at gene...@gump.apache.org. Project tomcat-trunk-test-apr has an issue affecting its community integration. Th

[GUMP@vmgump]: Project tomcat-tc8.0.x-test-apr (in module tomcat-8.0.x) failed

2015-01-19 Thread Bill Barker
To whom it may engage... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact the folk at gene...@gump.apache.org. Project tomcat-tc8.0.x-test-apr has an issue affecting its community integration.

svn commit: r1653183 - in /tomcat/trunk/java/org/apache/catalina/tribes/tipis: AbstractReplicatedMap.java LazyReplicatedMap.java ReplicatedMap.java

2015-01-19 Thread kfujino
Author: kfujino Date: Tue Jan 20 02:23:21 2015 New Revision: 1653183 URL: http://svn.apache.org/r1653183 Log: ReplicatedMap should send the Copy message when replicating. Modified: tomcat/trunk/java/org/apache/catalina/tribes/tipis/AbstractReplicatedMap.java tomcat/trunk/java/org/apache/

svn commit: r1653182 - /tomcat/trunk/webapps/docs/changelog.xml

2015-01-19 Thread kfujino
Author: kfujino Date: Tue Jan 20 02:12:31 2015 New Revision: 1653182 URL: http://svn.apache.org/r1653182 Log: Add changelog entry. Modified: tomcat/trunk/webapps/docs/changelog.xml Modified: tomcat/trunk/webapps/docs/changelog.xml URL: http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/

svn commit: r1653181 - /tomcat/trunk/java/org/apache/catalina/tribes/tipis/AbstractReplicatedMap.java

2015-01-19 Thread kfujino
Author: kfujino Date: Tue Jan 20 02:07:41 2015 New Revision: 1653181 URL: http://svn.apache.org/r1653181 Log: Copy node does not need to send the entry data. It is enough to send only the node information of the entry. Modified: tomcat/trunk/java/org/apache/catalina/tribes/tipis/AbstractRepl

svn commit: r1653180 - /tomcat/trunk/java/org/apache/catalina/tribes/tipis/AbstractReplicatedMap.java

2015-01-19 Thread kfujino
Author: kfujino Date: Tue Jan 20 01:55:29 2015 New Revision: 1653180 URL: http://svn.apache.org/r1653180 Log: Remove duplicated code. Modified: tomcat/trunk/java/org/apache/catalina/tribes/tipis/AbstractReplicatedMap.java Modified: tomcat/trunk/java/org/apache/catalina/tribes/tipis/Abstrac

svn commit: r1653179 - /tomcat/trunk/java/org/apache/catalina/tribes/tipis/AbstractReplicatedMap.java

2015-01-19 Thread kfujino
Author: kfujino Date: Tue Jan 20 01:51:30 2015 New Revision: 1653179 URL: http://svn.apache.org/r1653179 Log: Simplify the code. Modified: tomcat/trunk/java/org/apache/catalina/tribes/tipis/AbstractReplicatedMap.java Modified: tomcat/trunk/java/org/apache/catalina/tribes/tipis/AbstractRepl

svn commit: r1653178 - /tomcat/trunk/java/org/apache/catalina/tribes/tipis/AbstractReplicatedMap.java

2015-01-19 Thread kfujino
Author: kfujino Date: Tue Jan 20 01:47:08 2015 New Revision: 1653178 URL: http://svn.apache.org/r1653178 Log: Clarify the handling of Copy message and Copy nodes. Modified: tomcat/trunk/java/org/apache/catalina/tribes/tipis/AbstractReplicatedMap.java Modified: tomcat/trunk/java/org/apache/

[Bug 57178] Add CorsFilter configuration option to allow requests with Origin "null"

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57178 --- Comment #4 from Gregor Zurowski --- No, is not needed, but I initially thought of a separate configuration option for making the decision of whether to allow the null origin more explicit. This also allows to control whether the default

[Bug 57455] Bootstrap doesn't handle paths with one quote

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57455 --- Comment #2 from Tobias Stoeckmann --- Totally fine with that approach! -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-

[Bug 57465] Build TC Native with with latest OpenSSL to address CVEs

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57465 --- Comment #6 from Mark Thomas --- DTLS is not supported by tc-native. Neither was the no-ssl3 buidl option used to produce the Windows binaries. The client issues are also clearly not relevant. That leaves three issues, all of which ap

[Bug 57467] Tomcat 8.0.14 - Using the Wrong Webapp Directory?

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57467 --- Comment #2 from Mark Barnes --- It works for Tomcat 6 and it worked for Tomcat 5. We're upgrading from 6.0.20 to 8.0.14. The configuration reference does say this: The Application Base directory for this virtual host. This is the pat

[Bug 57467] Tomcat 8.0.14 - Using the Wrong Webapp Directory?

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57467 Chuck Caldarale changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

[Bug 57467] New: Tomcat 8.0.14 - Using the Wrong Webapp Directory?

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57467 Bug ID: 57467 Summary: Tomcat 8.0.14 - Using the Wrong Webapp Directory? Product: Tomcat 8 Version: 8.0.14 Hardware: PC OS: Linux Status: NEW Severi

[Bug 57420] Wrong class names generated since URL_ENCODER in DirContextURLConnection is not thread safe

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57420 --- Comment #5 from Felix Schumacher --- I came up with the same patch as Violeta and it fixes the reported problem (unpackWARs has to be set to false, if you want to reproduce it and of course it helps if some sleep statements are inserted

[Bug 57465] Build TC Native with with latest OpenSSL to address CVEs

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57465 --- Comment #5 from brian.m.pick...@gmail.com --- (In reply to Mark Thomas from comment #4) > Again, which of those do you think apply to tc-native? Just because OpenSSL > has a vulnerability that does not mean that tc-native automatically h

svn commit: r1653046 - in /tomcat/tc8.0.x/trunk: ./ java/org/apache/juli/WebappProperties.java

2015-01-19 Thread markt
Author: markt Date: Mon Jan 19 16:48:14 2015 New Revision: 1653046 URL: http://svn.apache.org/r1653046 Log: Backport some Javadoc fixes. (Mainly to see if CI for 8.0.x-trunk has been fixed) Modified: tomcat/tc8.0.x/trunk/ (props changed) tomcat/tc8.0.x/trunk/java/org/apache/juli/Webapp

[Bug 57465] Build TC Native with with latest OpenSSL to address CVEs

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57465 --- Comment #4 from Mark Thomas --- Again, which of those do you think apply to tc-native? Just because OpenSSL has a vulnerability that does not mean that tc-native automatically has the vulnerability. -- You are receiving this mail beca

[Bug 57465] Build TC Native with with latest OpenSSL to address CVEs

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57465 --- Comment #3 from brian.m.pick...@gmail.com --- (In reply to brian.m.pickens from comment #2) > Unless I'm somehow mistaken I believe the following CVEs apply to openssl > 1.0.1j and I believe tcnative 1.1.31 is built with 1.0.1j. > > CVE

[Bug 57465] Build TC Native with with latest OpenSSL to address CVEs

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57465 --- Comment #2 from brian.m.pick...@gmail.com --- Unless I'm somehow mistaken I believe the following CVEs apply to openssl 1.0.1j and I believe tcnative 1.1.31 is built with 1.0.1j. CVE-2014-3569: 21st October 2014 CVE-2014-8275: 5th Janua

[Bug 57465] Build TC Native with with latest OpenSSL to address CVEs

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57465 Mark Thomas changed: What|Removed |Added OS||All --- Comment #1 from Mark Thomas

svn commit: r1653041 - /tomcat/trunk/java/org/apache/juli/WebappProperties.java

2015-01-19 Thread markt
Author: markt Date: Mon Jan 19 16:20:27 2015 New Revision: 1653041 URL: http://svn.apache.org/r1653041 Log: Simple Javadoc fix (mainly to test the CI system) Modified: tomcat/trunk/java/org/apache/juli/WebappProperties.java Modified: tomcat/trunk/java/org/apache/juli/WebappProperties.java UR

[Bug 57465] New: Build TC Native with with latest OpenSSL to address CVEs

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57465 Bug ID: 57465 Summary: Build TC Native with with latest OpenSSL to address CVEs Product: Tomcat Native Version: 1.1.32 Hardware: PC Status: NEW

[Bug 57455] Bootstrap doesn't handle paths with one quote

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57455 --- Comment #1 from Mark Thomas --- Thanks for the patch. I can confirm that it fixes the issues described. But... This has the potential to get messy. Neither " nor , is permitted in a file name in Windows but both are acceptable in unix

[Bug 57464] Please support for TLS Fallback SCSV

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57464 Mark Thomas changed: What|Removed |Added Severity|normal |enhancement --- Comment #1 from Mark

[Bug 57464] New: Please support for TLS Fallback SCSV

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57464 Bug ID: 57464 Summary: Please support for TLS Fallback SCSV Product: Tomcat 7 Version: unspecified Hardware: All OS: All Status: NEW Severity: norma

[Bug 57420] Wrong class names generated since URL_ENCODER in DirContextURLConnection is not thread safe

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57420 --- Comment #4 from Konstantin Kolinko --- 1) As far as I see, UDecoder does not have any fields and thus is thread-safe. The thread safety is not documented, though. As such, I do not mind creating an instance of UDecoder, as that feels

[Bug 57420] Wrong class names generated since URL_ENCODER in DirContextURLConnection is not thread safe

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57420 Violeta Georgieva changed: What|Removed |Added Attachment #32378|0 |1 is patch|

[Bug 57420] Wrong class names generated since URL_ENCODER in DirContextURLConnection is not thread safe

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57420 --- Comment #3 from Violeta Georgieva --- Created attachment 32378 --> https://issues.apache.org/bugzilla/attachment.cgi?id=32378&action=edit Patch Hi, What do you think if we switch to UEncoder/UDecoder as regular fields of the class?

[Bug 57178] Add CorsFilter configuration option to allow requests with Origin "null"

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57178 --- Comment #3 from Mark Thomas --- Having had a closer look at this, I'm wondering why another configation option is needed. Why not just add "null" to the list of allowed origins? (This would still requires a small patch so null is accept

[Bug 57461] Rename 'JAVA_HOME' message printed by VersionLoggerListener

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57461 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

svn commit: r1652975 - in /tomcat/tc7.0.x/trunk: ./ java/org/apache/catalina/startup/LocalStrings.properties webapps/docs/changelog.xml

2015-01-19 Thread markt
Author: markt Date: Mon Jan 19 12:00:49 2015 New Revision: 1652975 URL: http://svn.apache.org/r1652975 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=57461 When reporting value of java.home don't make it look like an environment variable. Modified: tomcat/tc7.0.x/trunk/ (props

svn commit: r1652973 - in /tomcat/tc8.0.x/trunk: ./ java/org/apache/catalina/startup/LocalStrings.properties webapps/docs/changelog.xml

2015-01-19 Thread markt
Author: markt Date: Mon Jan 19 11:58:26 2015 New Revision: 1652973 URL: http://svn.apache.org/r1652973 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=57461 When reporting value of java.home don't make it look like an environment variable. Modified: tomcat/tc8.0.x/trunk/ (props

svn commit: r1652970 - /tomcat/trunk/java/org/apache/catalina/startup/LocalStrings.properties

2015-01-19 Thread markt
Author: markt Date: Mon Jan 19 11:54:01 2015 New Revision: 1652970 URL: http://svn.apache.org/r1652970 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=57461 When reporting value of java.home don't make it look like an environment variable. Modified: tomcat/trunk/java/org/apache/c

Re: svn commit: r1652468 - /tomcat/trunk/java/org/apache/tomcat/util/net/Nio2Endpoint.java

2015-01-19 Thread Mark Thomas
On 19/01/2015 10:52, Rémy Maucherat wrote: > 2015-01-17 2:41 GMT+01:00 Mark Thomas : > >> The other thought I had (but haven't had time to test for performance >> impact) is that the readPending semaphore is really only useful when the >> previous or current read is non-blocking. A blocking read f

[Bug 57446] Catalina presents a wrapped ServletContext in de-init phase to application listeners

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57446 Mark Thomas changed: What|Removed |Added Status|REOPENED|RESOLVED Resolution|---

[Bug 57446] Catalina presents a wrapped ServletContext in de-init phase to application listeners

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57446 Birger Zimmermann changed: What|Removed |Added Status|RESOLVED|REOPENED Resolution|FI

Re: svn commit: r1652468 - /tomcat/trunk/java/org/apache/tomcat/util/net/Nio2Endpoint.java

2015-01-19 Thread Rémy Maucherat
2015-01-17 2:41 GMT+01:00 Mark Thomas : > The other thought I had (but haven't had time to test for performance > impact) is that the readPending semaphore is really only useful when the > previous or current read is non-blocking. A blocking read followed by a > blocking read doesn't need it. > >

[Bug 57461] New: Rename 'JAVA_HOME' message printed by VersionLoggerListener

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57461 Bug ID: 57461 Summary: Rename 'JAVA_HOME' message printed by VersionLoggerListener Product: Tomcat 8 Version: 8.0.17 Hardware: PC Status: NEW Se

[Bug 57458] Mixed up responses sent to wrong users

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57458 --- Comment #3 from Konstantin Kolinko --- (In reply to Mark Thomas from comment #1) > 7.0.39 is getting on for 2 years old and has a number of known security > vulnerabilities including one that can result in response mix ups. > > Please

[Bug 57460] New: [DB2]Connection broken after few hours but not removed from the pool?

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57460 Bug ID: 57460 Summary: [DB2]Connection broken after few hours but not removed from the pool? Product: Tomcat Modules Version: unspecified Hardware: Other

[GUMP@vmgump]: Project tomcat-trunk-test-apr (in module tomcat-trunk) failed

2015-01-19 Thread Bill Barker
it-4.13-SNAPSHOT.jar -Dobjenesis.jar=/srv/gump/public/workspace/objenesis/main/target/objenesis-2.2-SNAPSHOT.jar -Dtest.reports=output/logs-APR -Dtomcat-native.tar.gz=/srv/gump/public/workspace/apache-commons/daemon/dist/bin/commons-daemon-20150119-native-src.tar.gz -Dexamples.sources.skip=true

[Bug 57441] EL Lambda expression in a JSP fails with The function incr must be used with a prefix when a default namespace is not specified

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57441 --- Comment #3 from Konstantin Kolinko --- Is it at all possible to reliably validate functions at compile time? Maybe whitelist functions that have name only with no prefix? BTW, it is possible to use javax.el.ImportHandler.importStatic

[Bug 57446] Catalina presents a wrapped ServletContext in de-init phase to application listeners

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57446 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

svn commit: r1652943 - in /tomcat/tc7.0.x/trunk: ./ webapps/docs/changelog.xml

2015-01-19 Thread markt
Author: markt Date: Mon Jan 19 09:21:19 2015 New Revision: 1652943 URL: http://svn.apache.org/r1652943 Log: (empty) Modified: tomcat/tc7.0.x/trunk/ (props changed) tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml Propchange: tomcat/tc7.0.x/trunk/

svn commit: r1652942 - in /tomcat/tc7.0.x/trunk: ./ java/org/apache/catalina/core/StandardContext.java test/org/apache/catalina/core/TestStandardContext.java test/org/apache/catalina/core/TesterTldLis

2015-01-19 Thread markt
Author: markt Date: Mon Jan 19 09:19:44 2015 New Revision: 1652942 URL: http://svn.apache.org/r1652942 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=57446 Ensure that the ServletContext presented to a listener for contextInitialized() is the same as the one presented when contextDes

svn commit: r1652940 - in /tomcat/tc8.0.x/trunk: ./ java/org/apache/catalina/core/StandardContext.java test/org/apache/catalina/core/TestStandardContext.java test/org/apache/catalina/core/TesterTldLis

2015-01-19 Thread markt
Author: markt Date: Mon Jan 19 09:14:29 2015 New Revision: 1652940 URL: http://svn.apache.org/r1652940 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=57446 Ensure that the ServletContext presented to a listener for contextInitialized() is the same as the one presented when contextDes

svn commit: r1652939 - /tomcat/tc8.0.x/trunk/webapps/docs/changelog.xml

2015-01-19 Thread markt
Author: markt Date: Mon Jan 19 09:10:58 2015 New Revision: 1652939 URL: http://svn.apache.org/r1652939 Log: Fix formatting: - ':' after - max width 80 chars Modified: tomcat/tc8.0.x/trunk/webapps/docs/changelog.xml Modified: tomcat/tc8.0.x/trunk/webapps/docs/changelog.xml URL: http://svn

svn commit: r1652938 - in /tomcat/trunk: java/org/apache/catalina/core/StandardContext.java test/org/apache/catalina/core/TestStandardContext.java test/org/apache/catalina/core/TesterTldListener.java

2015-01-19 Thread markt
Author: markt Date: Mon Jan 19 09:08:08 2015 New Revision: 1652938 URL: http://svn.apache.org/r1652938 Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=57446 Ensure that the ServletContext presented to a listener for contextInitialized() is the same as the one presented when contextDes

[Bug 57458] Mixed up responses sent to wrong users

2015-01-19 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57458 --- Comment #2 from Mahmoud Al-Yasein --- We are not using any of mentioned items, unfortunately I don't have the stack trace just null pointer exception without stack trace, I'll try to use the latest version and see -- You are receiving