[Bug 68696] Tomcat throws ClientAbortException: java.io.IOException: Broken pipe even the client request is complete successfully

2024-03-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68696

Mark Thomas  changed:

   What|Removed |Added

 Resolution|--- |INVALID
 Status|NEW |RESOLVED

--- Comment #1 from Mark Thomas  ---
Those error messages are consistent with an application not following the
requirements of section 2.3.3.4 of the Servlet specification.

The stack trace shows that Spring is being used. You may be hitting a variation
of this issue https://github.com/spring-projects/spring-framework/issues/32340

Absent a test case that demonstrates errors such as this while following the
requirements of 2.3.3.4 and the rest of the Servlet spec, the assumption is
going to be that the root cause is an application issue, not a Tomcat issue.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68495] Unable to find match between the canonical context and the URI presented by the user agent

2024-03-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68495

--- Comment #12 from Mark Thomas  ---
Thanks for the test case. I am able recreate the issue now.

The root cause is a combination of this code in the FormAuthenticator:
https://github.com/apache/tomcat/blob/9.0.x/java/org/apache/catalina/authenticator/FormAuthenticator.java#L637

and the changes to MessageBytes back in 9.0.0-M5 and the fix for bug 66627 in
9.0.77.

This has been partially fix in 9.0.86 as a side-effect of bug 68026 but it
looks as if query string is still affected.

I have a more robust fix in mind that I want to test before committing.
Assuming all goes well this should be fixed later today and included in the
next release round.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68495] Unable to find match between the canonical context and the URI presented by the user agent

2024-03-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68495

--- Comment #13 from Remy Maucherat  ---
I was planning to do:
public String getQueryString() {
return coyoteRequest.queryString().toStringType();
}

Since the idea from the FormAuthenticator is to change the MessageBytes type to
String and toString no longer does it (but toStringType does).

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68495] Unable to find match between the canonical context and the URI presented by the user agent

2024-03-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68495

--- Comment #14 from Mark Thomas  ---
That was my first thought but:
1. I didn't want correct behaviour of the FormAuthenticator to depend on
caching decisions in Request that could - in theory - change over time
2. I didn't cache query string when I last looked at it as there were some
usage patterns that could trigger conversion back to byte

My plan (which looks to work) is to call toStringType() directly from
FormAuthenticator

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



(tomcat) branch main updated: Fix BZ 68495 - force conversion to String

2024-03-02 Thread markt
This is an automated email from the ASF dual-hosted git repository.

markt pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomcat.git


The following commit(s) were added to refs/heads/main by this push:
 new 61a2a05478 Fix BZ 68495 - force conversion to String
61a2a05478 is described below

commit 61a2a0547826917763f01703e3b2d69871a60037
Author: Mark Thomas 
AuthorDate: Sat Mar 2 10:27:39 2024 +

Fix BZ 68495 - force conversion to String

When restoring a saved POST request after a successful FORM
authentication, ensure that neither the URI, the query string nor the
protocol are corrupted when restoring the request body.

https://bz.apache.org/bugzilla/show_bug.cgi?id=68495
---
 java/org/apache/catalina/authenticator/FormAuthenticator.java | 6 +++---
 webapps/docs/changelog.xml| 5 +
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/java/org/apache/catalina/authenticator/FormAuthenticator.java 
b/java/org/apache/catalina/authenticator/FormAuthenticator.java
index 661d51d936..acb4bdc2c1 100644
--- a/java/org/apache/catalina/authenticator/FormAuthenticator.java
+++ b/java/org/apache/catalina/authenticator/FormAuthenticator.java
@@ -638,9 +638,9 @@ public class FormAuthenticator extends AuthenticatorBase {
 // it would in a normal request would require some invasive API 
changes.
 // Therefore force the conversion to String now so the correct values
 // are presented if the application requests them.
-request.getRequestURI();
-request.getQueryString();
-request.getProtocol();
+request.getCoyoteRequest().requestURI().toStringType();
+request.getCoyoteRequest().queryString().toStringType();
+request.getCoyoteRequest().protocol().toStringType();
 
 if (saved.getOriginalMaxInactiveInterval() > 0) {
 
session.setMaxInactiveInterval(saved.getOriginalMaxInactiveInterval());
diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml
index a4ba56d379..a7adf61445 100644
--- a/webapps/docs/changelog.xml
+++ b/webapps/docs/changelog.xml
@@ -132,6 +132,11 @@
 org.apache.catalina.Executor interface now extends
 ExecutorService. (remm)
   
+  
+68495: When restoring a saved POST request after a 
successful
+FORM authentication, ensure that neither the URI, the query string nor
+the protocol are corrupted when restoring the request body. (markt)
+  
 
   
   


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



(tomcat) branch 10.1.x updated: Fix BZ 68495 - force conversion to String

2024-03-02 Thread markt
This is an automated email from the ASF dual-hosted git repository.

markt pushed a commit to branch 10.1.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git


The following commit(s) were added to refs/heads/10.1.x by this push:
 new 505ac56f83 Fix BZ 68495 - force conversion to String
505ac56f83 is described below

commit 505ac56f83c5091afdc1d31baca9249f7510b1ee
Author: Mark Thomas 
AuthorDate: Sat Mar 2 10:27:39 2024 +

Fix BZ 68495 - force conversion to String

When restoring a saved POST request after a successful FORM
authentication, ensure that neither the URI, the query string nor the
protocol are corrupted when restoring the request body.

https://bz.apache.org/bugzilla/show_bug.cgi?id=68495
---
 java/org/apache/catalina/authenticator/FormAuthenticator.java | 6 +++---
 webapps/docs/changelog.xml| 5 +
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/java/org/apache/catalina/authenticator/FormAuthenticator.java 
b/java/org/apache/catalina/authenticator/FormAuthenticator.java
index 0513ddfb27..f5efd87ead 100644
--- a/java/org/apache/catalina/authenticator/FormAuthenticator.java
+++ b/java/org/apache/catalina/authenticator/FormAuthenticator.java
@@ -643,9 +643,9 @@ public class FormAuthenticator extends AuthenticatorBase {
 // it would in a normal request would require some invasive API 
changes.
 // Therefore force the conversion to String now so the correct values
 // are presented if the application requests them.
-request.getRequestURI();
-request.getQueryString();
-request.getProtocol();
+request.getCoyoteRequest().requestURI().toStringType();
+request.getCoyoteRequest().queryString().toStringType();
+request.getCoyoteRequest().protocol().toStringType();
 
 if (saved.getOriginalMaxInactiveInterval() > 0) {
 
session.setMaxInactiveInterval(saved.getOriginalMaxInactiveInterval());
diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml
index e5a590ac8a..9d9b0a4d60 100644
--- a/webapps/docs/changelog.xml
+++ b/webapps/docs/changelog.xml
@@ -123,6 +123,11 @@
 configured using the Executor element now implement
 ExecutorService for better support NIO2. (remm)
   
+  
+68495: When restoring a saved POST request after a 
successful
+FORM authentication, ensure that neither the URI, the query string nor
+the protocol are corrupted when restoring the request body. (markt)
+  
 
   
   


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



(tomcat) branch 9.0.x updated: Fix BZ 68495 - force conversion to String

2024-03-02 Thread markt
This is an automated email from the ASF dual-hosted git repository.

markt pushed a commit to branch 9.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git


The following commit(s) were added to refs/heads/9.0.x by this push:
 new 59f09b4ca1 Fix BZ 68495 - force conversion to String
59f09b4ca1 is described below

commit 59f09b4ca128d8cbdaab788fc1dcd301bb0385d1
Author: Mark Thomas 
AuthorDate: Sat Mar 2 10:27:39 2024 +

Fix BZ 68495 - force conversion to String

When restoring a saved POST request after a successful FORM
authentication, ensure that neither the URI, the query string nor the
protocol are corrupted when restoring the request body.

https://bz.apache.org/bugzilla/show_bug.cgi?id=68495
---
 java/org/apache/catalina/authenticator/FormAuthenticator.java | 6 +++---
 webapps/docs/changelog.xml| 5 +
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/java/org/apache/catalina/authenticator/FormAuthenticator.java 
b/java/org/apache/catalina/authenticator/FormAuthenticator.java
index fc449abd5f..a5e2556710 100644
--- a/java/org/apache/catalina/authenticator/FormAuthenticator.java
+++ b/java/org/apache/catalina/authenticator/FormAuthenticator.java
@@ -643,9 +643,9 @@ public class FormAuthenticator extends AuthenticatorBase {
 // it would in a normal request would require some invasive API 
changes.
 // Therefore force the conversion to String now so the correct values
 // are presented if the application requests them.
-request.getRequestURI();
-request.getQueryString();
-request.getProtocol();
+request.getCoyoteRequest().requestURI().toStringType();
+request.getCoyoteRequest().queryString().toStringType();
+request.getCoyoteRequest().protocol().toStringType();
 
 if (saved.getOriginalMaxInactiveInterval() > 0) {
 
session.setMaxInactiveInterval(saved.getOriginalMaxInactiveInterval());
diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml
index 928d515442..960029a715 100644
--- a/webapps/docs/changelog.xml
+++ b/webapps/docs/changelog.xml
@@ -123,6 +123,11 @@
 configured using the Executor element now implement
 ExecutorService for better support NIO2. (remm)
   
+  
+68495: When restoring a saved POST request after a 
successful
+FORM authentication, ensure that neither the URI, the query string nor
+the protocol are corrupted when restoring the request body. (markt)
+  
 
   
   


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



(tomcat) branch 8.5.x updated: Fix BZ 68495 - force conversion to String

2024-03-02 Thread markt
This is an automated email from the ASF dual-hosted git repository.

markt pushed a commit to branch 8.5.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git


The following commit(s) were added to refs/heads/8.5.x by this push:
 new eb665c99f7 Fix BZ 68495 - force conversion to String
eb665c99f7 is described below

commit eb665c99f7d1b5596827d08e228562f51056df8a
Author: Mark Thomas 
AuthorDate: Sat Mar 2 10:27:39 2024 +

Fix BZ 68495 - force conversion to String

When restoring a saved POST request after a successful FORM
authentication, ensure that neither the URI, the query string nor the
protocol are corrupted when restoring the request body.

https://bz.apache.org/bugzilla/show_bug.cgi?id=68495
---
 java/org/apache/catalina/authenticator/FormAuthenticator.java | 6 +++---
 webapps/docs/changelog.xml| 5 +
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/java/org/apache/catalina/authenticator/FormAuthenticator.java 
b/java/org/apache/catalina/authenticator/FormAuthenticator.java
index fc449abd5f..a5e2556710 100644
--- a/java/org/apache/catalina/authenticator/FormAuthenticator.java
+++ b/java/org/apache/catalina/authenticator/FormAuthenticator.java
@@ -643,9 +643,9 @@ public class FormAuthenticator extends AuthenticatorBase {
 // it would in a normal request would require some invasive API 
changes.
 // Therefore force the conversion to String now so the correct values
 // are presented if the application requests them.
-request.getRequestURI();
-request.getQueryString();
-request.getProtocol();
+request.getCoyoteRequest().requestURI().toStringType();
+request.getCoyoteRequest().queryString().toStringType();
+request.getCoyoteRequest().protocol().toStringType();
 
 if (saved.getOriginalMaxInactiveInterval() > 0) {
 
session.setMaxInactiveInterval(saved.getOriginalMaxInactiveInterval());
diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml
index 4313ee557f..e79a1d705b 100644
--- a/webapps/docs/changelog.xml
+++ b/webapps/docs/changelog.xml
@@ -114,6 +114,11 @@
 discardFacades is configured with the default value of
 true.
   
+  
+68495: When restoring a saved POST request after a 
successful
+FORM authentication, ensure that neither the URI, the query string nor
+the protocol are corrupted when restoring the request body. (markt)
+  
 
   
   


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 68495] Unable to find match between the canonical context and the URI presented by the user agent

2024-03-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=68495

Mark Thomas  changed:

   What|Removed |Added

 Status|REOPENED|RESOLVED
 Resolution|--- |FIXED

--- Comment #15 from Mark Thomas  ---
Fixed in:
- 11.0.x for 11.0.0-M18 onwards
- 10.1.x for 10.1.20 onwards
-  9.0.x for  9.0.87 onwards
-  8.5.x for  8.5.100 onwards

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Sporadic Failures in org.apache.coyote.http2.TestRfc9218

2024-03-02 Thread Rainer Jung

Hi there,

for a long time I get sporadic failures in 
org.apache.coyote.http2.TestRfc9218. It happens for all branches of TC, 
for NIO and NIO2 and with JSSE and tcnative. Tested platforms Linux and 
Solaris see this. And JVM versions 1.8.0, 11, 17 and 21 show it. It is 
also not restricted to a specific JDK vendor.


It does not happen frequently. For instance I tried running only this 
test in a loop and in 225 test runs for NIO+NIO2, so 450 overall test 
executions, I got 4 failing executions.


The typical failure is like this:

Testcase: testPriority[1: loop [0], useAsyncIO[true]] took 0.309 sec
FAILED
expected:<1[7]-Body-1024
> but was:<1[9]-Body-1024
>
junit.framework.AssertionFailedError: expected:<1[7]-Body-1024
> but was:<1[9]-Body-1024
>
at 
org.apache.coyote.http2.TestRfc9218.testPriority(TestRfc9218.java:80)


but there are also other variations (even more rare) like

Testcase: testPriority[1: loop [0], useAsyncIO[true]] took 0.305 sec
FAILED
null
junit.framework.AssertionFailedError
at 
org.apache.coyote.http2.TestRfc9218.testPriority(TestRfc9218.java:170)



Is there something I can do to provide more information, add more 
logging or so? Full current log output see below.


Thanks and regards,

Rainer

Testsuite: org.apache.coyote.http2.TestRfc9218
Tests run: 2, Failures: 1, Errors: 0, Skipped: 0, Time elapsed: 3.061 sec
- Standard Output ---
3-HeadersStart
3-Header-[:status]-[200]
3-Header-[content-type]-[application/octet-stream]
3-Header-[content-length]-[8192]
3-Header-[date]-[Wed, 11 Nov 2015 19:18:42 GMT]
3-HeadersEnd
3-Body-8192
3-EndOfStream
5-HeadersStart
5-Header-[:status]-[200]
5-Header-[content-type]-[application/octet-stream]
5-Header-[content-length]-[8192]
5-Header-[date]-[Wed, 11 Nov 2015 19:18:42 GMT]
5-HeadersEnd
5-Body-8192
5-EndOfStream
7-HeadersStart
7-Header-[:status]-[200]
7-Header-[content-type]-[application/octet-stream]
7-Header-[content-length]-[8192]
7-Header-[date]-[Wed, 11 Nov 2015 19:18:42 GMT]
7-HeadersEnd
7-Body-8192
7-EndOfStream
9-HeadersStart
9-Header-[:status]-[200]
9-Header-[content-type]-[application/octet-stream]
9-Header-[content-length]-[8192]
9-Header-[date]-[Wed, 11 Nov 2015 19:18:42 GMT]
9-HeadersEnd
9-Body-8192
9-EndOfStream
11-HeadersStart
11-Header-[:status]-[200]
11-Header-[content-type]-[application/octet-stream]
11-Header-[content-length]-[8192]
11-Header-[date]-[Wed, 11 Nov 2015 19:18:42 GMT]
11-HeadersEnd
11-Body-8192
11-EndOfStream
13-HeadersStart
13-Header-[:status]-[200]
13-Header-[content-type]-[application/octet-stream]
13-Header-[content-length]-[8192]
13-Header-[date]-[Wed, 11 Nov 2015 19:18:42 GMT]
13-HeadersEnd
13-Body-8192
13-EndOfStream
15-HeadersStart
15-Header-[:status]-[200]
15-Header-[content-type]-[application/octet-stream]
15-Header-[content-length]-[8192]
15-Header-[date]-[Wed, 11 Nov 2015 19:18:42 GMT]
15-HeadersEnd
15-Body-8192
15-EndOfStream

17-HeadersStart
17-Header-[:status]-[200]
17-Header-[content-type]-[application/octet-stream]
17-Header-[content-length]-[8192]
17-Header-[date]-[Wed, 11 Nov 2015 19:18:42 GMT]
17-HeadersEnd
17-Body-1024

19-HeadersStart
19-Header-[:status]-[200]
19-Header-[content-type]-[application/octet-stream]
19-Header-[content-length]-[8192]
19-Header-[date]-[Wed, 11 Nov 2015 19:18:42 GMT]
19-HeadersEnd
21-HeadersStart
21-Header-[:status]-[200]
21-Header-[content-type]-[application/octet-stream]
21-Header-[content-length]-[8192]
21-Header-[date]-[Wed, 11 Nov 2015 19:18:42 GMT]
21-HeadersEnd

21-Body-1365
17-Body-5266
17-EndOfStream
19-Body-1560

3-HeadersStart
3-Header-[:status]-[200]
3-Header-[content-type]-[application/octet-stream]
3-Header-[content-length]-[8192]
3-Header-[date]-[Wed, 11 Nov 2015 19:18:42 GMT]
3-HeadersEnd
3-Body-8192
3-EndOfStream
5-HeadersStart
5-Header-[:status]-[200]
5-Header-[content-type]-[application/octet-stream]
5-Header-[content-length]-[8192]
5-Header-[date]-[Wed, 11 Nov 2015 19:18:42 GMT]
5-HeadersEnd
5-Body-8192
5-EndOfStream
7-HeadersStart
7-Header-[:status]-[200]
7-Header-[content-type]-[application/octet-stream]
7-Header-[content-length]-[8192]
7-Header-[date]-[Wed, 11 Nov 2015 19:18:42 GMT]
7-HeadersEnd
7-Body-8192
7-EndOfStream
9-HeadersStart
9-Header-[:status]-[200]
9-Header-[content-type]-[application/octet-stream]
9-Header-[content-length]-[8192]
9-Header-[date]-[Wed, 11 Nov 2015 19:18:42 GMT]
9-HeadersEnd
9-Body-8192
9-EndOfStream
11-HeadersStart
11-Header-[:status]-[200]
11-Header-[content-type]-[application/octet-stream]
11-Header-[content-length]-[8192]
11-Header-[date]-[Wed, 11 Nov 2015 19:18:42 GMT]
11-HeadersEnd
11-Body-8192
11-EndOfStream
13-HeadersStart
13-Header-[:status]-[200]
13-Header-[content-type]-[application/octet-stream]
13-Header-[content-length]-[8192]
13-Header-[date]-[Wed, 11 Nov 2015 19:18:42 GMT]
13-HeadersEnd
13-Body-8192
13-EndOfStream
15-HeadersStart
15-Header-[:status]-[200]
15-Header-[content-type]-[application/octet-stream]
15-Header-[content-length]-[8192]
15-He

Bug report for Taglibs [2024/03/03]

2024-03-02 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|38193|Ass|Enh|2006-01-09|[RDC] BuiltIn Grammar support for Field   |
|38600|Ass|Enh|2006-02-10|[RDC] Enable RDCs to be used in X+V markup (X+RDC)|
|42413|New|Enh|2007-05-14|[PATCH] Log Taglib enhancements   |
|46052|New|Nor|2008-10-21|SetLocaleSupport is slow to initialize when many l|
|48333|New|Enh|2009-12-02|TLD generator |
|57548|New|Min|2015-02-08|Auto-generate the value for org.apache.taglibs.sta|
|57684|New|Min|2015-03-10|Version info should be taken from project version |
|59359|New|Enh|2016-04-20|(Task) Extend validity period for signing KEY - be|
|59668|New|Nor|2016-06-06|x:forEach retains the incorrect scope when used in|
|61875|New|Nor|2017-12-08|Investigate whether Xalan can be removed  |
|64649|New|Nor|2020-08-06|XSLT transformation - document('') doesn't return |
|65491|New|Nor|2021-08-09|Behavior differences with c:import when flushing o|
+-+---+---+--+--+
| Total   12 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat 9 [2024/03/03]

2024-03-02 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|53602|Ver|Enh|2012-07-25|Support for HTTP status code 451  |
|57505|New|Enh|2015-01-27|Add integration tests for JspC|
|58530|New|Enh|2015-10-23|Proposal for new Manager HTML GUI |
|58548|Inf|Enh|2015-10-26|support certifcate transparency   |
|58859|New|Enh|2016-01-14|Allow to limit charsets / encodings supported by T|
|59750|New|Enh|2016-06-24|Amend "authenticate" method with context by means |
|60997|New|Enh|2017-04-17|Enhance SemaphoreValve to support denied status an|
|61971|New|Enh|2018-01-06|documentation for using tomcat with systemd   |
|62048|New|Enh|2018-01-25|Missing logout function in Manager and Host-Manage|
|62072|New|Enh|2018-02-01|Add support for request compression   |
|62405|New|Enh|2018-05-23|Add Rereadable Request Filter |
|62488|New|Enh|2018-06-25|Obtain dependencies from Maven Central where possi|
|62611|Inf|Enh|2018-08-09|Compress log files after rotation |
|62773|New|Enh|2018-09-28|Change DeltaManager to handle session deserializat|
|62814|New|Enh|2018-10-10|Use readable names for cluster channel/map options|
|62843|New|Enh|2018-10-22|Tomcat Russian localization   |
|62964|Inf|Enh|2018-11-29|Add RFC7807 conformant Problem Details for HTTP st|
|63023|New|Enh|2018-12-20|Provide a way to load SecurityProviders into the s|
|63049|New|Enh|2018-12-31|Add support in system properties override from com|
|63237|New|Enh|2019-03-06|Consider processing mbeans-descriptors.xml at comp|
|63389|New|Enh|2019-04-27|Enable Servlet Warmup for Containerization|
|63493|New|Enh|2019-06-10|enhancement - add JMX counters to monitor authenti|
|63505|New|Enh|2019-06-14|enhancement - support of stored procedures for Dat|
|63545|New|Enh|2019-07-06|enhancement - add a new pattern attribute for logg|
|63943|Opn|Enh|2019-11-20|Add possibility to overwrite remote port with info|
|63983|Ver|Cri|2019-12-03|Jasper builds-up open files until garbage collecti|
|64230|New|Enh|2020-03-15|Allow to configure session manager to skip expirin|
|64395|New|Enh|2020-04-30|Windows Installer should offer an option to select|
|65208|New|Enh|2021-03-29|Multi-threaded loading of servlets|
|65302|New|Enh|2021-05-12|Add support for setting com.sun.jndi.ldap.tls.cbty|
|65778|Opn|Enh|2022-01-01|Don't create URL from string  |
|65779|Inf|Enh|2022-01-01|Introduce CATALINA_BASE_DATA  |
|66592|Opn|Enh|2023-05-04|Support for HTTPS proxy in websocket client   |
|66631|New|Enh|2023-06-07|Consider moving module-info.class to META-INF/vers|
|66647|New|Enh|2023-06-14|Analyze usefulness and consider deprecation of cer|
|66654|New|Enh|2023-06-16|Setting displayname while using service.bat to ins|
|67080|Ver|Nor|2023-08-29|ImplicitObjectELResolverImpl.getValue() is slow   |
|68596|New|Enh|2024-02-07|Remaining overhead in javax.el.CompositeELResolver|
|68631|New|Blk|2024-02-15|Observing org.apache.catalina.connector.ClientAbor|
|68634|New|Nor|2024-02-16|Forwards using custom response classes do not wait|
+-+---+---+--+--+
| Total   40 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat Connectors [2024/03/03]

2024-03-02 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|46767|New|Enh|2009-02-25|mod_jk to send DECLINED in case no fail-over tomca|
|47327|New|Enh|2009-06-07|Return tomcat authenticated user back to mod_jk (A|
|47750|New|Maj|2009-08-27|ISAPI: Loss of worker settings when changing via j|
|48830|New|Nor|2010-03-01|IIS shutdown blocked in endpoint service when serv|
|49822|New|Enh|2010-08-25|Add hash lb worker method |
|49903|New|Enh|2010-09-09|Make workers file reloadable  |
|52483|New|Enh|2012-01-18|Print JkOptions's options in log file and jkstatus|
|54621|New|Enh|2013-02-28|[PATCH] custom mod_jk availability checks |
|56489|New|Enh|2014-05-05|Include a directory for configuration files   |
|56576|New|Enh|2014-05-29|Websocket support |
|57402|New|Enh|2014-12-30|Provide correlation ID between mod_jk log and acce|
|57403|New|Enh|2014-12-30|Persist configuration changes made via status work|
|57407|New|Enh|2014-12-31|Make session_cookie, session_path and session_cook|
|57790|New|Enh|2015-04-03|Check worker names for typos  |
|61476|New|Enh|2017-09-01|Allow reset of an individual worker stat value|
|61621|New|Enh|2017-10-15|Content-Type is forced to lowercase when it goes t|
|62093|New|Enh|2018-02-09|Allow use_server_errors to apply to specific statu|
|63808|Inf|Enh|2019-10-05|the fact that JkMount makes other directives ineff|
|64775|Inf|Nor|2020-09-28|mod_jk is sending both Content-Length and Transfer|
|65488|Inf|Nor|2021-08-08|Destroy method is not being called during Failover|
|68677|New|Enh|2024-02-26|no support for enviroment variables/request attrib|
+-+---+---+--+--+
| Total   21 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat Native [2024/03/03]

2024-03-02 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|62911|New|Enh|2018-11-15|Add support for proxying ocsp  requests via ProxyH|
|64826|New|Maj|2020-10-19|libtcnative prompts for private key password in so|
|64862|New|Enh|2020-10-30|Improve LibreSSL support  |
|65344|New|Enh|2021-05-31|OpenSSL configuration |
|7|New|Enh|2023-06-23|Take care of OpenSSL deprecated code  |
|67609|New|Nor|2023-10-05|Incomplete OpenSSL error handling/reporting   |
|67683|New|Nor|2023-10-11|C source code is not compatible with OpenSSL 1.0.2|
+-+---+---+--+--+
| Total7 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat 8 [2024/03/03]

2024-03-02 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|55243|New|Enh|2013-07-11|Add special search string for nested roles|
|55470|New|Enh|2013-08-23|Help users for ClassNotFoundExceptions during star|
|55675|New|Enh|2013-10-18|Checking and handling invalid configuration option|
|55788|New|Enh|2013-11-16|TagPlugins should key on tag QName rather than imp|
|56148|New|Enh|2014-02-17|support (multiple) ocsp stapling  |
|56300|New|Enh|2014-03-22|[Tribes] No useful examples, lack of documentation|
|56398|New|Enh|2014-04-11|Support Arquillian-based unit testing |
|56402|New|Enh|2014-04-11|Add support for HTTP Upgrade to AJP components|
|56438|New|Enh|2014-04-21|If jar scan does not find context config or TLD co|
|56546|New|Enh|2014-05-19|Improve thread trace logging in WebappClassLoader.|
|56614|New|Enh|2014-06-12|Add a switch to ignore annotations detection on ta|
|56713|New|Enh|2014-07-12|Limit time that incoming request waits while webap|
|56787|New|Enh|2014-07-29|Simplified jndi name parsing  |
|57129|Opn|Enh|2014-10-22|Regression. Load WEB-INF/lib jarfiles in alphabeti|
|57130|New|Enh|2014-10-22|Allow digest.sh to accept password from a file or |
|57367|New|Enh|2014-12-18|If JAR scan experiences a stack overflow, give the|
|57421|New|Enh|2015-01-07|Farming default directories   |
|57486|New|Enh|2015-01-23|Improve reuse of ProtectedFunctionMapper instances|
|57701|New|Enh|2015-03-13|Implement "[Redeploy]" button for a web applicatio|
|57827|New|Enh|2015-04-17|Enable adding/removing of members via jmx in a sta|
|57830|New|Enh|2015-04-18|Add support for ProxyProtocol |
|57872|New|Enh|2015-04-29|Do not auto-switch session cookie to version=1 due|
|58052|Opn|Enh|2015-06-19|RewriteValve: Implement additional RewriteRule dir|
|58072|New|Enh|2015-06-23|ECDH curve selection  |
|58935|Opn|Enh|2016-01-29|Re-deploy from war without deleting context   |
|60849|New|Enh|2017-03-13|Tomcat NIO Connector not able to handle SSL renego|
|61877|New|Enh|2017-12-08|use web.xml from CATALINA_HOME by default |
|62214|New|Enh|2018-03-22|The "userSubtree=true" and "roleSubtree=true" in J|
|63080|New|Enh|2019-01-16|Support rfc7239 Forwarded header  |
|63167|New|Enh|2019-02-12|Network Requirements To Resolve No Members Active |
|63195|Inf|Enh|2019-02-21|Add easy way to test RemoteIpValve works properly |
|65809|New|Enh|2022-01-19|Reduce memory footprint for long-lasting WebSocket|
+-+---+---+--+--+
| Total   32 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat 10 [2024/03/03]

2024-03-02 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|64353|New|Enh|2020-04-15|Add support for accessing server certificate from |
|64549|New|Enh|2020-06-23|create a project module to launch Tomcat in OSGi  |
|64550|New|Enh|2020-06-23|create a project module to launch Tomcat in JPMS  |
|65124|New|Enh|2021-02-03|Inefficient generated JSP code|
|65267|New|Enh|2021-04-27|Implement mod_headers like filter |
|65391|New|Enh|2021-06-19|Additional user attributes queried by (some) realm|
|65635|New|Enh|2021-10-15|Methods to return auth errors |
|66125|New|Enh|2022-06-16|JMProxy - enhance security restrictions   |
|66191|New|Enh|2022-08-01|compile taglibs that are not (yet) included in jsp|
|66406|New|Enh|2023-01-02|JULI ClassLoaderLogManager creates multiple logger|
|66613|Ver|Enh|2023-05-23|Developing wiki page: Unclear reference to "servic|
|66616|Ver|Nor|2023-05-26|French: Misleading HTTP 401 error description ("La|
|68480|New|Enh|2024-01-15|Add cipher alias for TLSv1.3  |
+-+---+---+--+--+
| Total   13 bugs   |
+---+

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Bug report for Tomcat Modules [2024/03/03]

2024-03-02 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|50571|Inf|Nor|2011-01-11|Tomcat 7 JDBC connection pool exception enhancemen|
|51595|Inf|Nor|2011-08-01|org.apache.tomcat.jdbc.pool.jmx.ConnectionPool sho|
|51879|Inf|Enh|2011-09-22|Improve access to Native Connection Methods   |
|52024|Inf|Enh|2011-10-13|Custom interceptor to support automatic failover o|
|53199|Inf|Enh|2012-05-07|Refactor ConnectionPool to use ScheduledExecutorSe|
|54437|New|Enh|2013-01-16|Update PoolProperties javadoc for ConnectState int|
|54929|Inf|Nor|2013-05-05|jdbc-pool cannot be used with Java 1.5, "java.lang|
|55078|New|Nor|2013-06-07|Configuring a DataSource Resource with dataSourceJ|
|55662|New|Enh|2013-10-17|Add a way to set an instance of java.sql.Driver di|
|56046|New|Enh|2014-01-21|org.apache.tomcat.jdbc.pool.XADataSource InitSQL p|
|56088|New|Maj|2014-01-29|AbstractQueryReport$StatementProxy throws exceptio|
|56310|Inf|Maj|2014-03-25|PooledConnection and XAConnection not handled corr|
|56586|New|Nor|2014-06-02|initSQL should be committed if defaultAutoCommit =|
|56775|New|Nor|2014-07-28|PoolCleanerTime schedule issue|
|56779|New|Nor|2014-07-28|Allow multiple connection initialization statement|
|56790|New|Nor|2014-07-29|Resizing pool.maxActive to a higher value at runti|
|56798|New|Nor|2014-07-31|Idle eviction strategy could perform better (and i|
|56804|New|Nor|2014-08-02|Use a default validationQueryTimeout other than "f|
|56805|New|Nor|2014-08-02|datasource.getConnection() may be unnecessarily bl|
|56837|New|Nor|2014-08-11|if validationQuery have error with timeBetweenEvic|
|56970|New|Nor|2014-09-11|MaxActive vs. MaxTotal for commons-dbcp and tomcat|
|57460|New|Nor|2015-01-19|[DB2]Connection broken after few hours but not rem|
|57729|New|Enh|2015-03-20|Add QueryExecutionReportInterceptor to log query e|
|58489|Opn|Maj|2015-10-08|QueryStatsComparator throws IllegalArgumentExcepti|
|59077|New|Nor|2016-02-26|DataSourceFactory creates a neutered data source  |
|59569|New|Nor|2016-05-18|isWrapperFor/unwrap implementations incorrect |
|59879|New|Nor|2016-07-18|StatementCache interceptor returns ResultSet objec|
|60195|New|Nor|2016-10-02|No javadoc in Maven Central   |
|60522|New|Nor|2016-12-27|An option for setting if the transaction should be|
|60524|Inf|Nor|2016-12-28|NPE in SlowQueryReport in tomcat-jdbc-7.0.68  |
|60645|New|Nor|2017-01-25|StatementFinalizer is not thread-safe |
|61032|New|Nor|2017-04-24|min pool size is not being respected  |
|61103|New|Nor|2017-05-18|StatementCache potentially caching non-functional |
|61302|New|Enh|2017-07-15|Refactoring of DataSourceProxy|
|61303|New|Enh|2017-07-15|Refactoring of ConnectionPool |
|62432|New|Nor|2018-06-06|Memory Leak in Statement Finalizer?   |
|62598|New|Enh|2018-08-04|support pool with multiple JDBC data sources  |
|62910|Inf|Nor|2018-11-15|tomcat-jdbc global pool transaction problem   |
|63612|Inf|Cri|2019-07-26|PooledConnection#connectUsingDriver, Thread.curren|
|63705|New|Nor|2019-08-29|The tomcat pool doesn't register all connection th|
|64083|New|Nor|2020-01-17|JDBC pool keeps closed connection as available|
|64107|New|Maj|2020-01-30|PreparedStatements correctly closed are not return|
|64231|New|Nor|2020-03-16|Tomcat jdbc pool behaviour|
|64809|New|Nor|2020-10-13|Connection properties not reset to defaults when C|
|65347|New|Nor|2021-06-02|The equals method from statements generated by the|
|65929|New|Nor|2022-03-03|Connection is not released on Connection.abort() c|
|66502|New|Enh|2023-03-01|tomcat-jdbc ConnectionPool.returnConnection() acce|
|68295|New|Nor|2023-12-05|Connection has already been closed - Tomcat connec|
|68436|New|Nor|2024-01-02|Hide "Not loading a JDBC driver as driverClassName|
+-+---+---+--+--+
| Total   49 bugs   |
+--