yoavs       2004/12/09 05:53:00

  Modified:    catalina/src/share/org/apache/catalina/realm Tag: TOMCAT_5_0
                        RealmBase.java
               webapps/docs Tag: TOMCAT_5_0 changelog.xml
  Log:
  Bugzilla 32137.
  
  Revision  Changes    Path
  No                   revision
  No                   revision
  1.33.2.3  +12 -21    
jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/realm/RealmBase.java
  
  Index: RealmBase.java
  ===================================================================
  RCS file: 
/home/cvs/jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/realm/RealmBase.java,v
  retrieving revision 1.33.2.2
  retrieving revision 1.33.2.3
  diff -u -r1.33.2.2 -r1.33.2.3
  --- RealmBase.java    27 Oct 2004 16:26:18 -0000      1.33.2.2
  +++ RealmBase.java    9 Dec 2004 13:52:59 -0000       1.33.2.3
  @@ -346,22 +346,6 @@
                                     String nOnce, String nc, String cnonce,
                                     String qop, String realm,
                                     String md5a2) {
  -
  -        /*
  -          System.out.println("Digest : " + clientDigest);
  -
  -          System.out.println("************ Digest info");
  -          System.out.println("Username:" + username);
  -          System.out.println("ClientSigest:" + clientDigest);
  -          System.out.println("nOnce:" + nOnce);
  -          System.out.println("nc:" + nc);
  -          System.out.println("cnonce:" + cnonce);
  -          System.out.println("qop:" + qop);
  -          System.out.println("realm:" + realm);
  -          System.out.println("md5a2:" + md5a2);
  -        */
  -
  -
           String md5a1 = getDigest(username, realm);
           if (md5a1 == null)
               return null;
  @@ -380,8 +364,11 @@
               }
           }
   
  -        String serverDigest =
  -            md5Encoder.encode(md5Helper.digest(valueBytes));
  +        String serverDigest = null;
  +        // Bugzilla 32137
  +        synchronized(md5Helper) {
  +            serverDigest = md5Encoder.encode(md5Helper.digest(valueBytes));
  +        }
   
           if (serverDigest.equals(clientDigest))
               return getPrincipal(username);
  @@ -1105,8 +1092,12 @@
               }
           }
   
  -        byte[] digest =
  -            md5Helper.digest(valueBytes);
  +        byte[] digest = null;
  +        // Bugzilla 32137
  +        synchornized(md5Helper) {
  +            digest = md5Helper.digest(valueBytes);
  +        }
  +
           return md5Encoder.encode(digest);
       }
   
  
  
  
  No                   revision
  No                   revision
  1.70.2.90 +3 -0      jakarta-tomcat-catalina/webapps/docs/changelog.xml
  
  Index: changelog.xml
  ===================================================================
  RCS file: /home/cvs/jakarta-tomcat-catalina/webapps/docs/changelog.xml,v
  retrieving revision 1.70.2.89
  retrieving revision 1.70.2.90
  diff -u -r1.70.2.89 -r1.70.2.90
  --- changelog.xml     9 Dec 2004 13:46:54 -0000       1.70.2.89
  +++ changelog.xml     9 Dec 2004 13:52:59 -0000       1.70.2.90
  @@ -40,6 +40,9 @@
         <fix>
           <bug>32502</bug>: Memory leak in DigestAuthenticator. (yoavs)
         </fix>
  +      <fix>
  +        <bug>32137</bug>: Possible thread-safety issue in RealmBase. (yoavs)
  +      </fix>
       </changelog>
     </subsection>
   
  
  
  

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to