[GUMP@vmgump-vm3]: Project tomcat-trunk-test-nio2 (in module tomcat-trunk) failed

2018-08-17 Thread Bill Barker
To whom it may engage... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact the folk at gene...@gump.apache.org. Project tomcat-trunk-test-nio2 has an issue affecting its community integration.

[Bug 62635] New: Async servlet over HTTP/2 response.flushBuffer() intermittently fails

2018-08-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62635 Bug ID: 62635 Summary: Async servlet over HTTP/2 response.flushBuffer() intermittently fails Product: Tomcat 9 Version: 9.0.x Hardware: PC OS: Linux

[Bug 62628] Async servlet over HTTP/2 non-blocking write does not work if client sets custom SETTINGS_INITIAL_WINDOW_SIZE

2018-08-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62628 --- Comment #5 from Dapeng Zhang --- Thanks a lot for the fix! Now almost all my integrated tests passed. -- You are receiving this mail because: You are the assignee for the bug.

buildbot success in on tomcat-trunk

2018-08-17 Thread buildbot
The Buildbot has detected a restored build on builder tomcat-trunk while building . Full details are available at: https://ci.apache.org/builders/tomcat-trunk/builds/3530 Buildbot URL: https://ci.apache.org/ Buildslave for this Build: silvanus_ubuntu Build Reason: The AnyBranchScheduler

buildbot failure in on tomcat-trunk

2018-08-17 Thread buildbot
The Buildbot has detected a new failure on builder tomcat-trunk while building . Full details are available at: https://ci.apache.org/builders/tomcat-trunk/builds/3529 Buildbot URL: https://ci.apache.org/ Buildslave for this Build: silvanus_ubuntu Build Reason: The AnyBranchScheduler

svn commit: r28814 - /dev/tomcat/tomcat-8/v8.5.33/ /release/tomcat/tomcat-8/v8.5.33/

2018-08-17 Thread markt
Author: markt Date: Fri Aug 17 20:51:16 2018 New Revision: 28814 Log: Release Apache Tomcat 8.5.33 Added: release/tomcat/tomcat-8/v8.5.33/ - copied from r28813, dev/tomcat/tomcat-8/v8.5.33/ Removed: dev/tomcat/tomcat-8/v8.5.33/

svn commit: r1838288 - /tomcat/tc8.5.x/trunk/webapps/docs/changelog.xml

2018-08-17 Thread markt
Author: markt Date: Fri Aug 17 20:49:48 2018 New Revision: 1838288 URL: http://svn.apache.org/viewvc?rev=1838288=rev Log: Update release date Modified: tomcat/tc8.5.x/trunk/webapps/docs/changelog.xml Modified: tomcat/tc8.5.x/trunk/webapps/docs/changelog.xml URL:

[VOTE][RESULT] Release Apache Tomcat 8.5.33

2018-08-17 Thread Mark Thomas
The following votes were cast: Binding: +1: markt, fschumacher, violetagg No other votes were cast. The vote therefore passes. Thanks to everyone who contributed towards this release. Mark - To unsubscribe, e-mail:

[Bug 62628] Async servlet over HTTP/2 non-blocking write does not work if client sets custom SETTINGS_INITIAL_WINDOW_SIZE

2018-08-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62628 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

svn commit: r1838287 - in /tomcat/tc8.5.x/trunk: ./ test/org/apache/coyote/http2/TestAsync.java webapps/docs/changelog.xml

2018-08-17 Thread markt
Author: markt Date: Fri Aug 17 20:46:21 2018 New Revision: 1838287 URL: http://svn.apache.org/viewvc?rev=1838287=rev Log: Expand Async + HTTP/2 tests to cover larger window sizes. Confirm previous fix fixes BZ 62628. Modified: tomcat/tc8.5.x/trunk/ (props changed)

svn commit: r1838286 - in /tomcat/trunk: test/org/apache/coyote/http2/TestAsync.java webapps/docs/changelog.xml

2018-08-17 Thread markt
Author: markt Date: Fri Aug 17 20:45:42 2018 New Revision: 1838286 URL: http://svn.apache.org/viewvc?rev=1838286=rev Log: Expand Async + HTTP/2 tests to cover larger window sizes. Confirm previous fix fixes BZ 62628. Modified: tomcat/trunk/test/org/apache/coyote/http2/TestAsync.java

svn commit: r1838282 - in /tomcat/tc8.5.x/trunk: ./ test/org/apache/coyote/http2/TestAsync.java

2018-08-17 Thread markt
Author: markt Date: Fri Aug 17 20:07:38 2018 New Revision: 1838282 URL: http://svn.apache.org/viewvc?rev=1838282=rev Log: Expand async HTTP/2 tests to cover writes on non-container threads Modified: tomcat/tc8.5.x/trunk/ (props changed)

svn commit: r1838281 - /tomcat/trunk/test/org/apache/coyote/http2/TestAsync.java

2018-08-17 Thread markt
Author: markt Date: Fri Aug 17 20:07:19 2018 New Revision: 1838281 URL: http://svn.apache.org/viewvc?rev=1838281=rev Log: Expand async HTTP/2 tests to cover writes on non-container threads Modified: tomcat/trunk/test/org/apache/coyote/http2/TestAsync.java Modified:

svn commit: r1838280 - in /tomcat/tc8.5.x/trunk: ./ conf/logging.properties

2018-08-17 Thread markt
Author: markt Date: Fri Aug 17 19:53:19 2018 New Revision: 1838280 URL: http://svn.apache.org/viewvc?rev=1838280=rev Log: Undo debugging change Modified: tomcat/tc8.5.x/trunk/ (props changed) tomcat/tc8.5.x/trunk/conf/logging.properties Propchange: tomcat/tc8.5.x/trunk/

svn commit: r1838279 - /tomcat/trunk/conf/logging.properties

2018-08-17 Thread markt
Author: markt Date: Fri Aug 17 19:53:01 2018 New Revision: 1838279 URL: http://svn.apache.org/viewvc?rev=1838279=rev Log: Undo debugging change Modified: tomcat/trunk/conf/logging.properties Modified: tomcat/trunk/conf/logging.properties URL:

svn commit: r1838278 - in /tomcat/tc8.5.x/trunk: ./ conf/logging.properties test/org/apache/coyote/http2/TestAsync.java

2018-08-17 Thread markt
Author: markt Date: Fri Aug 17 19:52:29 2018 New Revision: 1838278 URL: http://svn.apache.org/viewvc?rev=1838278=rev Log: Refactor to a parameterized test Modified: tomcat/tc8.5.x/trunk/ (props changed) tomcat/tc8.5.x/trunk/conf/logging.properties

svn commit: r1838277 - in /tomcat/trunk: conf/logging.properties test/org/apache/coyote/http2/TestAsync.java

2018-08-17 Thread markt
Author: markt Date: Fri Aug 17 19:51:44 2018 New Revision: 1838277 URL: http://svn.apache.org/viewvc?rev=1838277=rev Log: Refactor to a parameterized test Modified: tomcat/trunk/conf/logging.properties tomcat/trunk/test/org/apache/coyote/http2/TestAsync.java Modified:

svn commit: r1838276 - in /tomcat/tc8.5.x/trunk: ./ java/org/apache/coyote/http2/ test/org/apache/coyote/http2/ webapps/docs/

2018-08-17 Thread markt
Author: markt Date: Fri Aug 17 19:26:24 2018 New Revision: 1838276 URL: http://svn.apache.org/viewvc?rev=1838276=rev Log: Additional fixes for output corruption of response bodies when writing large bodies using asynchronous processing over HTTP/2. Added:

svn commit: r1838275 - in /tomcat/trunk: java/org/apache/coyote/http2/ test/org/apache/coyote/http2/ webapps/docs/

2018-08-17 Thread markt
Author: markt Date: Fri Aug 17 19:16:56 2018 New Revision: 1838275 URL: http://svn.apache.org/viewvc?rev=1838275=rev Log: Additional fixes for output corruption of response bodies when writing large bodies using asynchronous processing over HTTP/2. Added:

svn commit: r1838274 - in /tomcat/tc8.5.x/trunk: ./ java/org/apache/coyote/ java/org/apache/coyote/http2/

2018-08-17 Thread markt
Author: markt Date: Fri Aug 17 19:16:36 2018 New Revision: 1838274 URL: http://svn.apache.org/viewvc?rev=1838274=rev Log: Additional debug logging Modified: tomcat/tc8.5.x/trunk/ (props changed) tomcat/tc8.5.x/trunk/java/org/apache/coyote/AbstractProcessorLight.java

[Bug 62582] Please add OWASP Dependency Check to the build for all Tomcat componets

2018-08-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62582 --- Comment #8 from Christopher Schultz --- (In reply to mgrigorov from comment #4) > As Mark explained there is not much to check anyway because Tomcat doesn't > have dependencies. Well... that's not entirely true. Tomcat does rely on: 1.

[Bug 62626] Tomcat 9.0.10 APR/Native crashes

2018-08-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62626 --- Comment #12 from Christopher Schultz --- (In reply to jan.pfeifer from comment #11) > (In reply to Christopher Schultz from comment #10) > > Have a look at this page: > > https://wiki.apache.org/tomcat/FAQ/KnownIssues#ImageIOIssues > > If

[Bug 62626] Tomcat 9.0.10 APR/Native crashes

2018-08-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62626 --- Comment #11 from jan.pfei...@centrum.cz --- (In reply to Christopher Schultz from comment #10) > Have a look at this page: > https://wiki.apache.org/tomcat/FAQ/KnownIssues#ImageIOIssues If I undestand correctly there is only problem when

Securing temporary file-uploads

2018-08-17 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, A presentation at DEFCON[1] last week showed how many Android applications were improperly using shared external storage on Android devices and could be vulnerable due to improper handling of temporary files. This was your basic: 1. Download

[Bug 62626] Tomcat 9.0.10 APR/Native crashes

2018-08-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62626 --- Comment #10 from Christopher Schultz --- Have a look at this page: https://wiki.apache.org/tomcat/FAQ/KnownIssues#ImageIOIssues Try going back up to Java 10 and wrapping your streaming-ImageIO uses in the class shown in that wiki page and

Re: [VOTE] Release Apache Tomcat 8.5.33

2018-08-17 Thread Violeta Georgieva
Hi, На нд, 12.08.2018 г. в 11:43 ч. Mark Thomas написа: > > The proposed Apache Tomcat 8.5.33 release is now available for voting. > > The major changes compared to the 8.5.32 release are: > > - Fix issues with Servlet asynchronous listeners when using the > asynchronous Servlet API in

buildbot success in on tomcat-trunk

2018-08-17 Thread buildbot
The Buildbot has detected a restored build on builder tomcat-trunk while building . Full details are available at: https://ci.apache.org/builders/tomcat-trunk/builds/3526 Buildbot URL: https://ci.apache.org/ Buildslave for this Build: silvanus_ubuntu Build Reason: The AnyBranchScheduler

svn commit: r28803 - /dev/tomcat/tomcat-9/v9.0.11/ /release/tomcat/tomcat-9/v9.0.11/

2018-08-17 Thread markt
Author: markt Date: Fri Aug 17 13:13:35 2018 New Revision: 28803 Log: Release Apache Tomcat 9.0.11 Added: release/tomcat/tomcat-9/v9.0.11/ - copied from r28802, dev/tomcat/tomcat-9/v9.0.11/ Removed: dev/tomcat/tomcat-9/v9.0.11/

svn commit: r1838258 - /tomcat/trunk/webapps/docs/changelog.xml

2018-08-17 Thread markt
Author: markt Date: Fri Aug 17 13:00:29 2018 New Revision: 1838258 URL: http://svn.apache.org/viewvc?rev=1838258=rev Log: Add the release date for 9.0.11 Modified: tomcat/trunk/webapps/docs/changelog.xml Modified: tomcat/trunk/webapps/docs/changelog.xml URL:

[VOTE][RESULT] Release Apache Tomcat 9.0.11

2018-08-17 Thread Mark Thomas
The following votes were cast: Binding: +1: markt, fschumacher, violetagg No other votes were cast. Thanks to everyone who contributed to this release. Mark - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For

[Bug 62626] Tomcat 9.0.10 APR/Native crashes

2018-08-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62626 --- Comment #9 from jan.pfei...@centrum.cz --- (In reply to Mark Thomas from comment #8) > You mentioned imageio. I'm not sure at what point you stooped using it but > there have been consistent reports over the years of imageio holding on to >

buildbot failure in on tomcat-trunk

2018-08-17 Thread buildbot
The Buildbot has detected a new failure on builder tomcat-trunk while building . Full details are available at: https://ci.apache.org/builders/tomcat-trunk/builds/3525 Buildbot URL: https://ci.apache.org/ Buildslave for this Build: silvanus_ubuntu Build Reason: The AnyBranchScheduler

[Bug 62633] New: WsSession leaks if cache Session are used for group sending

2018-08-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62633 Bug ID: 62633 Summary: WsSession leaks if cache Session are used for group sending Product: Tomcat 8 Version: 8.5.31 Hardware: PC Status: NEW

svn commit: r1838243 - in /tomcat/trunk/java/org/apache/coyote: AbstractProcessorLight.java http2/Http2UpgradeHandler.java http2/LocalStrings.properties http2/StreamProcessor.java

2018-08-17 Thread markt
Author: markt Date: Fri Aug 17 08:56:50 2018 New Revision: 1838243 URL: http://svn.apache.org/viewvc?rev=1838243=rev Log: Additional debug logging Modified: tomcat/trunk/java/org/apache/coyote/AbstractProcessorLight.java tomcat/trunk/java/org/apache/coyote/http2/Http2UpgradeHandler.java

[Bug 62626] Tomcat 9.0.10 APR/Native crashes

2018-08-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62626 --- Comment #8 from Mark Thomas --- You mentioned imageio. I'm not sure at what point you stooped using it but there have been consistent reports over the years of imageio holding on to references to I/O streams and using them long after they

[Bug 62626] Tomcat 9.0.10 APR/Native crashes

2018-08-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62626 --- Comment #7 from jan.pfei...@centrum.cz --- (In reply to Christopher Schultz from comment #6) > That's kind of par for the course, isn't it? Any IO operation can fail for > any reason. If you don't catch it and handle it, Tomcat will