DO NOT REPLY [Bug 45652] XSS patch for EL

2008-08-25 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45652 Matt Raible <[EMAIL PROTECTED]> changed: What|Removed |Added CC||[EMAIL PROTECTED]

Re: mod_proxy_balancer issue

2008-08-25 Thread Mladen Turk
Jess Holle wrote: I want to use mod_proxy_balancer to load balance over a set of ports that potentially have Tomcats running on them. Unfortunately there will generally be a good number of ports where no Tomcat is running. Every 'retry' seconds I have a request that takes about an extra seco

mod_proxy_balancer issue

2008-08-25 Thread Jess Holle
I want to use mod_proxy_balancer to load balance over a set of ports that potentially have Tomcats running on them. Unfortunately there will generally be a good number of ports where no Tomcat is running. Every 'retry' seconds I have a request that takes about an extra second for each Tomcat-

svn commit: r688904 - /tomcat/current/tc5.5.x/STATUS.txt

2008-08-25 Thread fhanik
Author: fhanik Date: Mon Aug 25 15:18:14 2008 New Revision: 688904 URL: http://svn.apache.org/viewvc?rev=688904&view=rev Log: votes Modified: tomcat/current/tc5.5.x/STATUS.txt Modified: tomcat/current/tc5.5.x/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/current/tc5.5.x/STATUS.txt?rev

svn commit: r688903 - /tomcat/tc6.0.x/trunk/STATUS.txt

2008-08-25 Thread fhanik
Author: fhanik Date: Mon Aug 25 15:17:36 2008 New Revision: 688903 URL: http://svn.apache.org/viewvc?rev=688903&view=rev Log: votes Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=68890

svn commit: r688865 - /tomcat/current/tc4.1.x/STATUS.txt

2008-08-25 Thread rjung
Author: rjung Date: Mon Aug 25 13:18:57 2008 New Revision: 688865 URL: http://svn.apache.org/viewvc?rev=688865&view=rev Log: Propose backport of r688857 (remove conv.recycle from CoyoteAdapter). Modified: tomcat/current/tc4.1.x/STATUS.txt Modified: tomcat/current/tc4.1.x/STATUS.txt URL: htt

svn commit: r688864 - /tomcat/current/tc5.5.x/STATUS.txt

2008-08-25 Thread rjung
Author: rjung Date: Mon Aug 25 13:18:45 2008 New Revision: 688864 URL: http://svn.apache.org/viewvc?rev=688864&view=rev Log: Propose backport of r688857 (remove conv.recycle from CoyoteAdapter). Modified: tomcat/current/tc5.5.x/STATUS.txt Modified: tomcat/current/tc5.5.x/STATUS.txt URL: htt

svn commit: r688863 - /tomcat/tc6.0.x/trunk/STATUS.txt

2008-08-25 Thread rjung
Author: rjung Date: Mon Aug 25 13:18:33 2008 New Revision: 688863 URL: http://svn.apache.org/viewvc?rev=688863&view=rev Log: Propose backport of r688857 (remove conv.recycle from CoyoteAdapter). Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://

svn commit: r688857 - /tomcat/trunk/java/org/apache/catalina/connector/CoyoteAdapter.java

2008-08-25 Thread rjung
Author: rjung Date: Mon Aug 25 13:08:05 2008 New Revision: 688857 URL: http://svn.apache.org/viewvc?rev=688857&view=rev Log: Remove recycle of B2CConverter when used for URI conversion. Recycle was an empty method until recently. It now eats up all bytes in the ByteChunk underlying the B2CConvert

Re: 5.5.27 blocker: URIEncoding UTF-8 broken for 5.5.trunk

2008-08-25 Thread Rainer Jung
I need a small correction: when I delete the available method of the IntermediateInputStream, I can neither reproduce the redirect problem, nor bz44494. My test against bz44494 was wrong. Nevertheless I would strongly prefer the removal of conv.recycle in convertURI in the Adapter code, because I

Re: 5.5.27 blocker: URIEncoding UTF-8 broken for 5.5.trunk

2008-08-25 Thread Rainer Jung
Unfortunately removing the available() method agains gives us back 44494. But there is some hope. B2CConverter gets used for two different things: 1) It is associated with a request and used inside the adapter to decode the URI. In this case, it seems that during the lifetime of the ByteChunk u

Re: 5.5.27 blocker: URIEncoding UTF-8 broken for 5.5.trunk

2008-08-25 Thread Rainer Jung
It's the available() methde of the class IntermediateInputStream contained in B2CConverter. It doesn't exist in 6.0. If I comment it out in 5.5 trunk. the problem is gone. The method was first introduced in http://svn.apache.org/viewvc/tomcat/connectors/trunk/util/java/org/apache/tomcat/util/buf/

Re: 5.5.27 blocker: URIEncoding UTF-8 broken for 5.5.trunk

2008-08-25 Thread Rainer Jung
OK, cancelled my appointment. More info: I backported all functional changes in o.a.tomcat.util.buf from tc6.x to tc5.5 and can't reproduce the problem any more. Those are very few changes. I'll narrow it down some more during the next hour. Stay tuned. Rainer Rainer Jung schrieb: > Filip Hanik

Re: 6.0.18 doc oddity

2008-08-25 Thread Mark Thomas
Remy Maucherat wrote: > On Mon, 2008-08-25 at 17:02 +0100, Mark Thomas wrote: >> Something odd has happened to the 6.0.18 binary. The CGI how-to is missing >> a change that is almost two years old (the reference to having to set >> privileged="true"). >> >> The src distro is OK but the error seems

Re: 5.5.27 blocker: URIEncoding UTF-8 broken for 5.5.trunk

2008-08-25 Thread Rainer Jung
Filip Hanik - Dev Lists schrieb: > Thanks Rainer, I will take a look at it tonight Thank you! Last info chunk for today: in CoyoteAdapter.convertURI, before the try/catch block that either creates or recycles the B2CConverter, the ByteChunk bc coming from the decodedURI contains the correct URI.

Re: 5.5.27 blocker: URIEncoding UTF-8 broken for 5.5.trunk

2008-08-25 Thread Filip Hanik - Dev Lists
Thanks Rainer, I will take a look at it tonight Filip Rainer Jung wrote: Remy Maucherat schrieb: On Mon, 2008-08-25 at 17:16 +0200, Rainer Jung wrote: If we revert the backport of http://svn.eu.apache.org/viewvc/tomcat/trunk/java/org/apache/tomcat/util/buf/B2CConverter.java?r1=642819

Re: 6.0.18 doc oddity

2008-08-25 Thread Remy Maucherat
On Mon, 2008-08-25 at 17:02 +0100, Mark Thomas wrote: > Something odd has happened to the 6.0.18 binary. The CGI how-to is missing > a change that is almost two years old (the reference to having to set > privileged="true"). > > The src distro is OK but the error seems to be present in the binary

svn commit: r688773 - /tomcat/tc6.0.x/trunk/webapps/docs/cgi-howto.xml

2008-08-25 Thread remm
Author: remm Date: Mon Aug 25 09:17:55 2008 New Revision: 688773 URL: http://svn.apache.org/viewvc?rev=688773&view=rev Log: - Ok, so I admit I could not figure out where the generated cgi doc was coming from for about 5 minutes. Funny. Modified: tomcat/tc6.0.x/trunk/webapps/docs/cgi-howto.xm

6.0.18 doc oddity

2008-08-25 Thread Mark Thomas
Something odd has happened to the 6.0.18 binary. The CGI how-to is missing a change that is almost two years old (the reference to having to set privileged="true"). The src distro is OK but the error seems to be present in the binary one. Remy - can you check the build environment you used for 6.

Re: 5.5.27 blocker: URIEncoding UTF-8 broken for 5.5.trunk

2008-08-25 Thread Rainer Jung
Remy Maucherat schrieb: > On Mon, 2008-08-25 at 17:16 +0200, Rainer Jung wrote: >> If we revert the backport of >> >> http://svn.eu.apache.org/viewvc/tomcat/trunk/java/org/apache/tomcat/util/buf/B2CConverter.java?r1=642819&r2=647307&diff_format=h >> >> then the redirect loop is gone, and the usual

Re: 5.5.27 blocker: URIEncoding UTF-8 broken for 5.5.trunk

2008-08-25 Thread Remy Maucherat
On Mon, 2008-08-25 at 17:16 +0200, Rainer Jung wrote: > If we revert the backport of > > http://svn.eu.apache.org/viewvc/tomcat/trunk/java/org/apache/tomcat/util/buf/B2CConverter.java?r1=642819&r2=647307&diff_format=h > > then the redirect loop is gone, and the usual content gets served, but > we

Re: svn commit: r687503 - in /tomcat/trunk/java/org/apache/tomcat/util/net/jsse: JSSESocketFactory.java res/LocalStrings.properties

2008-08-25 Thread Filip Hanik - Dev Lists
figured it out, you close the socket again Filip Filip Hanik - Dev Lists wrote: +socket.setSoTimeout(1); does this ever get reset? In JioEndpoint.java I see //if( serverTimeout >= 0 ) //serverSocket.setSoTimeout( serverTimeout ); It's commented out and I have a hard

Re: svn commit: r687503 - in /tomcat/trunk/java/org/apache/tomcat/util/net/jsse: JSSESocketFactory.java res/LocalStrings.properties

2008-08-25 Thread Filip Hanik - Dev Lists
+socket.setSoTimeout(1); does this ever get reset? In JioEndpoint.java I see //if( serverTimeout >= 0 ) //serverSocket.setSoTimeout( serverTimeout ); It's commented out and I have a hard time finding where it would be set to a more normal value, instead of 1 milliseco

5.5.27 blocker: URIEncoding UTF-8 broken for 5.5.trunk

2008-08-25 Thread Rainer Jung
Hi, URIEncoding="UTF-8" seems to be broken for 5.5.trunk at the moment. The reason is related to one of the fixes for BZ 44494. It doesn't have to do with the fixes for URIEncoding CVE. 6.0.18 works. For 5.5.trunk when URIEncoding="UTF-8" you always get a redirect to the ROOT context start page i

svn commit: r688694 - /tomcat/tc6.0.x/trunk/STATUS.txt

2008-08-25 Thread remm
Author: remm Date: Mon Aug 25 04:05:06 2008 New Revision: 688694 URL: http://svn.apache.org/viewvc?rev=688694&view=rev Log: - Vote. Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=68869

Denis LULLIER/Paris est absent(e).

2008-08-25 Thread dlullier
Je serai absent(e) du 25/08/2008 au 01/09/2008. Je répondrai à votre message dès mon retour. En cas d'urgence, vous pouvez contacter Marc-Olivier JOUAN

DO NOT REPLY [Bug 45403] Tomcat does not reload application

2008-08-25 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45403 --- Comment #3 from kawasima <[EMAIL PROTECTED]> 2008-08-25 00:26:56 PST --- There was a problem in this patch(22478). Please ignore this patch. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email ---