https://bz.apache.org/bugzilla/show_bug.cgi?id=60372

            Bug ID: 60372
           Summary: BufferOverflowException at java.nio.HeapByteBuffer.put
                    with HTTP/2 enabled
           Product: Tomcat 8
           Version: 8.5.8
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Connectors
          Assignee: dev@tomcat.apache.org
          Reporter: kat...@gmail.com
  Target Milestone: ----

Created attachment 34445
  --> https://bz.apache.org/bugzilla/attachment.cgi?id=34445&action=edit
A sample of journalctl output

With HTTP/2 enabled many similar exceptions frequently appear in journal.

SEVERE: Servlet.service() for servlet [default] in context with path [] threw
exception
java.nio.BufferOverflowException
        at java.nio.HeapByteBuffer.put(HeapByteBuffer.java:189)
SEVERE: Error processing request
java.nio.BufferOverflowException
        at java.nio.HeapByteBuffer.put(HeapByteBuffer.java:189)
SEVERE: Error finishing response
java.nio.BufferOverflowException
        at java.nio.HeapByteBuffer.put(HeapByteBuffer.java:189)

See attachment for full stack traces.

There are a few of HTTP and HTTPS connectors with IPv4 and IPv6 addresses.

HTTPS connectors configured like this:

<Connector address="..." port="443" protocol="HTTP/1.1" SSLEnabled="true"
      maxThreads="150" scheme="https" secure="true"
      connectionTimeout="20000"
      compression="on"
     
compressableMimeType="text/html,application/xml,text/css,application/javascript,text/plain,application/json">
        <UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol" />
        <SSLHostConfig>
            <Certificate
              certificateFile="..."
              certificateKeyFile="..."
              certificateChainFile="..."
        </SSLHostConfig>
</Connector>

Without <UpgradeProtocol> exceptions do not appear.

Server is running Tomcat 8.5.8 + tcnative 1.2.10 + openSSL 1.0.2h.

I cannot reproduce this on testing server with the same configuration by my own
requests.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to