https://bz.apache.org/bugzilla/show_bug.cgi?id=64671

Mark Thomas <ma...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
             Status|NEW                         |RESOLVED

--- Comment #1 from Mark Thomas <ma...@apache.org> ---
The NPE was detected in our CI system and fixed ~5 days ago. See
https://github.com/apache/tomcat/commit/583b7ad17ff7cd67ac15a50e76cf2e0c5cd9138a

The memory leak looks like CVE-2020-13934. See
https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.37
and "Ensure that the HTTP/1.1 processor is correctly recycled when a direct
connection to h2c is made. (markt)" in the change log.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to