svn commit: r1164384 - in /tomcat/site/trunk: docs/ xdocs/

2011-09-02 Thread markt
Author: markt Date: Fri Sep 2 07:51:52 2011 New Revision: 1164384 URL: http://svn.apache.org/viewvc?rev=1164384&view=rev Log: Update for 7.0.21 release Modified: tomcat/site/trunk/docs/doap_Tomcat.rdf tomcat/site/trunk/docs/download-70.html tomcat/site/trunk/docs/index.html tomca

DO NOT REPLY [Bug 50186] Wrong documentation of connection_pool_timeout / connectionTimeout

2011-09-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=50186 --- Comment #1 from i5513 2011-09-02 08:36:12 UTC --- Hi, Can anybody confirm this is a bug ? Which value should be connectionTimeout in server.xml then ? I was reading the doc, and I was going to change all my ajp connector configuration

[ANN] Apache Tomcat 7.0.21 released

2011-09-02 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 7.0.21 Apache Tomcat 7.0.21 includes security fixes, bug fixes and new features compared to version 7.0.20 including: - A fix for CVE-2011-3190 that allowed an attacker to inject requests when Tomcat was configured behind

svn commit: r1164419 - /tomcat/trunk/java/org/apache/coyote/http11/Http11NioProtocol.java

2011-09-02 Thread markt
Author: markt Date: Fri Sep 2 09:11:07 2011 New Revision: 1164419 URL: http://svn.apache.org/viewvc?rev=1164419&view=rev Log: Remove unused, undocumented configuration option Modified: tomcat/trunk/java/org/apache/coyote/http11/Http11NioProtocol.java Modified: tomcat/trunk/java/org/apache/c

svn commit: r1164421 - in /tomcat/tc7.0.x/trunk: ./ java/org/apache/coyote/http11/Http11NioProtocol.java webapps/docs/changelog.xml

2011-09-02 Thread markt
Author: markt Date: Fri Sep 2 09:13:20 2011 New Revision: 1164421 URL: http://svn.apache.org/viewvc?rev=1164421&view=rev Log: Remove unused, undocumented configuration option Modified: tomcat/tc7.0.x/trunk/ (props changed) tomcat/tc7.0.x/trunk/java/org/apache/coyote/http11/Http11NioPro

svn commit: r1164438 - in /tomcat/trunk/webapps/docs/config: ajp.xml http.xml

2011-09-02 Thread markt
Author: markt Date: Fri Sep 2 09:38:16 2011 New Revision: 1164438 URL: http://svn.apache.org/viewvc?rev=1164438&view=rev Log: Correct connectionLinger documentation Modified: tomcat/trunk/webapps/docs/config/ajp.xml tomcat/trunk/webapps/docs/config/http.xml Modified: tomcat/trunk/webapp

svn commit: r1164441 - in /tomcat/tc7.0.x/trunk: ./ webapps/docs/changelog.xml webapps/docs/config/ajp.xml webapps/docs/config/http.xml

2011-09-02 Thread markt
Author: markt Date: Fri Sep 2 09:40:15 2011 New Revision: 1164441 URL: http://svn.apache.org/viewvc?rev=1164441&view=rev Log: Correct connectionLinger documentation Modified: tomcat/tc7.0.x/trunk/ (props changed) tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml tomcat/tc7.0.x/trunk/

svn commit: r1164455 - in /tomcat/tc6.0.x/trunk/webapps/docs: changelog.xml config/http.xml

2011-09-02 Thread markt
Author: markt Date: Fri Sep 2 10:05:04 2011 New Revision: 1164455 URL: http://svn.apache.org/viewvc?rev=1164455&view=rev Log: Correct connectionLinger documentation Modified: tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml tomcat/tc6.0.x/trunk/webapps/docs/config/http.xml Modified: tomc

svn commit: r1164456 - /tomcat/tc6.0.x/trunk/webapps/docs/config/http.xml

2011-09-02 Thread markt
Author: markt Date: Fri Sep 2 10:05:27 2011 New Revision: 1164456 URL: http://svn.apache.org/viewvc?rev=1164456&view=rev Log: ms -> s Modified: tomcat/tc6.0.x/trunk/webapps/docs/config/http.xml Modified: tomcat/tc6.0.x/trunk/webapps/docs/config/http.xml URL: http://svn.apache.org/viewvc/to

svn commit: r1164457 - /tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml

2011-09-02 Thread markt
Author: markt Date: Fri Sep 2 10:09:13 2011 New Revision: 1164457 URL: http://svn.apache.org/viewvc?rev=1164457&view=rev Log: Add section name Modified: tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml Modified: tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml URL: http://svn.apache.org/view

DO NOT REPLY [Bug 51698] ajp CPing/Forward-Request packet forgery, is a design decision? or a security vulnerability?

2011-09-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=51698 --- Comment #3 from Edward Quick 2011-09-02 10:35:50 UTC --- Hi there, I was testing this out to see if my site was vulnerable and got the following results. I'm not sure looking at the code comments in ForwardRequestForgeryExample.java if

svn commit: r1164469 - in /tomcat/trunk/java/org/apache/catalina/core: StandardContextValve.java StandardHostValve.java

2011-09-02 Thread markt
Author: markt Date: Fri Sep 2 10:45:26 2011 New Revision: 1164469 URL: http://svn.apache.org/viewvc?rev=1164469&view=rev Log: Fix a regression with the fix for 51653 that broke custom error page handling for error status codes return by the authenticators. This moves error page handling back to

DO NOT REPLY [Bug 51698] ajp CPing/Forward-Request packet forgery, is a design decision? or a security vulnerability?

2011-09-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=51698 --- Comment #4 from Mark Thomas 2011-09-02 10:49:16 UTC --- Bugzilla is not a support forum. Please use the users mailing list. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving thi

DO NOT REPLY [Bug 51756] New: Tomcat JDBC Pool does not work with Sybase

2011-09-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=51756 Bug #: 51756 Summary: Tomcat JDBC Pool does not work with Sybase Product: Tomcat Modules Version: unspecified Platform: Sun OS/Version: Solaris Status: NEW

svn commit: r1164480 - /tomcat/trunk/java/org/apache/catalina/core/StandardHostValve.java

2011-09-02 Thread markt
Author: markt Date: Fri Sep 2 11:26:14 2011 New Revision: 1164480 URL: http://svn.apache.org/viewvc?rev=1164480&view=rev Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=51550 Use context error pages where possible e.g. for authenticator errors Modified: tomcat/trunk/java/org/apac

svn commit: r1164481 - in /tomcat/tc7.0.x/trunk: ./ java/org/apache/catalina/core/StandardContextValve.java java/org/apache/catalina/core/StandardHostValve.java webapps/docs/changelog.xml

2011-09-02 Thread markt
Author: markt Date: Fri Sep 2 11:30:56 2011 New Revision: 1164481 URL: http://svn.apache.org/viewvc?rev=1164481&view=rev Log: Fix a regression with the fix for 51653 that broke custom error page handling for error status codes return by the authenticators. This moves error page handling back to

svn commit: r1164482 - in /tomcat/tc7.0.x/trunk: ./ java/org/apache/catalina/core/StandardHostValve.java webapps/docs/changelog.xml

2011-09-02 Thread markt
Author: markt Date: Fri Sep 2 11:33:05 2011 New Revision: 1164482 URL: http://svn.apache.org/viewvc?rev=1164482&view=rev Log: (empty) Modified: tomcat/tc7.0.x/trunk/ (props changed) tomcat/tc7.0.x/trunk/java/org/apache/catalina/core/StandardHostValve.java tomcat/tc7.0.x/trunk/webap

DO NOT REPLY [Bug 51550] Empty response instead of error page for IllegalStateException

2011-09-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=51550 --- Comment #10 from Mark Thomas 2011-09-02 11:33:46 UTC --- I've added some code to 7.0.x that will use custom error pages in this scenario. I don't intend to back-port this part of the fix to 6.0.x or 5.5.x. -- Configure bugmail: https:

svn commit: r1164483 - /tomcat/tc5.5.x/trunk/STATUS.txt

2011-09-02 Thread markt
Author: markt Date: Fri Sep 2 11:36:22 2011 New Revision: 1164483 URL: http://svn.apache.org/viewvc?rev=1164483&view=rev Log: Vote Modified: tomcat/tc5.5.x/trunk/STATUS.txt Modified: tomcat/tc5.5.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc5.5.x/trunk/STATUS.txt?rev=11644

svn commit: r1164485 - in /tomcat/tc6.0.x/trunk: STATUS.txt build.properties.default eclipse.classpath java/org/apache/catalina/startup/TldConfig.java java/org/apache/jasper/compiler/TldLocationsCache

2011-09-02 Thread markt
Author: markt Date: Fri Sep 2 11:39:36 2011 New Revision: 1164485 URL: http://svn.apache.org/viewvc?rev=1164485&view=rev Log: native to 1.1.22 ecj to 3.7 Modified: tomcat/tc6.0.x/trunk/STATUS.txt tomcat/tc6.0.x/trunk/build.properties.default tomcat/tc6.0.x/trunk/eclipse.classpath

svn commit: r1164486 - in /tomcat/tc6.0.x/trunk: STATUS.txt java/org/apache/catalina/core/AprLifecycleListener.java webapps/docs/changelog.xml

2011-09-02 Thread markt
Author: markt Date: Fri Sep 2 11:41:57 2011 New Revision: 1164486 URL: http://svn.apache.org/viewvc?rev=1164486&view=rev Log: Update recommended tc-native to 1.1.22 Modified: tomcat/tc6.0.x/trunk/STATUS.txt tomcat/tc6.0.x/trunk/java/org/apache/catalina/core/AprLifecycleListener.java

svn commit: r1164488 - in /tomcat/tc6.0.x/trunk: STATUS.txt java/org/apache/coyote/http11/InternalAprInputBuffer.java webapps/docs/changelog.xml

2011-09-02 Thread markt
Author: markt Date: Fri Sep 2 11:43:52 2011 New Revision: 1164488 URL: http://svn.apache.org/viewvc?rev=1164488&view=rev Log: * Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=50394 Return -1 from read operation instead of throwing an exception when encountering an EOF with the HTTP APR c

DO NOT REPLY [Bug 51758] New: Setting logger-specific overrides in logging.properties not working

2011-09-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=51758 Bug #: 51758 Summary: Setting logger-specific overrides in logging.properties not working Product: Tomcat 7 Version: 7.0.14 Platform: PC OS/Version: Linux

svn commit: r1164489 - in /tomcat/tc6.0.x/trunk: STATUS.txt res/tomcat.nsi webapps/docs/changelog.xml

2011-09-02 Thread markt
Author: markt Date: Fri Sep 2 11:45:40 2011 New Revision: 1164489 URL: http://svn.apache.org/viewvc?rev=1164489&view=rev Log: Fix two typos in tomcat.nsi (uppercase vs. lowercase in a macro call and in a message) (kkolinko) Modified: tomcat/tc6.0.x/trunk/STATUS.txt tomcat/tc6.0.x/trunk/

svn commit: r1164490 - in /tomcat/tc6.0.x/trunk: ./ java/org/apache/coyote/ajp/ webapps/docs/

2011-09-02 Thread markt
Author: markt Date: Fri Sep 2 11:49:53 2011 New Revision: 1164490 URL: http://svn.apache.org/viewvc?rev=1164490&view=rev Log: Detect incomplete AJP messages and reject the associated request if one is found Modified: tomcat/tc6.0.x/trunk/STATUS.txt tomcat/tc6.0.x/trunk/java/org/apache/co

DO NOT REPLY [Bug 50394] InternalAprInputBuffer.fill() doesn't deal correctly with EOF

2011-09-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=50394 --- Comment #9 from Mark Thomas 2011-09-02 11:53:16 UTC --- Fixed in 6.0.x and will be included in 6.0.34 onwards -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because

DO NOT REPLY [Bug 51753] When specifying multiple elements, only the applications in the first one with a host called "localhost" are deployed

2011-09-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=51753 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|

DO NOT REPLY [Bug 51698] ajp CPing/Forward-Request packet forgery, is a design decision? or a security vulnerability?

2011-09-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=51698 --- Comment #5 from Edward Quick 2011-09-02 13:04:04 UTC --- Sorry about that. Will do. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the ass

DO NOT REPLY [Bug 51754] Tomcat7 filters from conf/web.xml are applied after filters defined in WEB-INF/web.xml

2011-09-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=51754 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|

DO NOT REPLY [Bug 49217] Accepting java keyword in EL

2011-09-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=49217 --- Comment #16 from Marcio Lucca 2011-09-02 13:57:44 UTC --- I don't know guys, I just ran into the same problem and I'll have to agree with Konstantin on comment 3: both specs 2.1 and 2.2 have that "Reserved Words" section, and neither c

DO NOT REPLY [Bug 49217] Accepting java keyword in EL

2011-09-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=49217 --- Comment #17 from Mark Thomas 2011-09-02 14:12:33 UTC --- The EL specification, Tomcat's implementation, the EL TCK and the EL expert group are all in agreement. EL identifiers must be valid Java identifiers as per the Java language spec

DO NOT REPLY [Bug 51758] Setting logger-specific overrides in logging.properties not working

2011-09-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=51758 --- Comment #1 from Mark Thomas 2011-09-02 15:01:00 UTC --- The logger name is not the same as the class name in that one case. The work-around is to define the level for: org.apache.commons.digester.Digester.level = INFO -- Configure bug

svn commit: r1164567 - /tomcat/trunk/java/org/apache/tomcat/util/digester/Digester.java

2011-09-02 Thread markt
Author: markt Date: Fri Sep 2 15:01:33 2011 New Revision: 1164567 URL: http://svn.apache.org/viewvc?rev=1164567&view=rev Log: Align logger name with class name. Modified: tomcat/trunk/java/org/apache/tomcat/util/digester/Digester.java Modified: tomcat/trunk/java/org/apache/tomcat/util/diges

svn commit: r1164569 - in /tomcat/tc7.0.x/trunk: ./ java/org/apache/tomcat/util/digester/Digester.java webapps/docs/changelog.xml

2011-09-02 Thread markt
Author: markt Date: Fri Sep 2 15:04:24 2011 New Revision: 1164569 URL: http://svn.apache.org/viewvc?rev=1164569&view=rev Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=51758 Align the digester logger names with the class name else users will never be able to figure out how to stop i

DO NOT REPLY [Bug 51758] Setting logger-specific overrides in logging.properties not working

2011-09-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=51758 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|

DO NOT REPLY [Bug 51758] Setting logger-specific overrides in logging.properties not working

2011-09-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=51758 --- Comment #3 from Glen Mazza 2011-09-02 16:12:15 UTC --- Thanks. I'll use the workaround but what is the fix in 7.0.22+ , did you rename the logger back to the actual class name (org.apache.commons.digester.Digester) or put in special co

DO NOT REPLY [Bug 51758] Setting logger-specific overrides in logging.properties not working

2011-09-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=51758 --- Comment #4 from Mark Thomas 2011-09-02 16:21:39 UTC --- The logger was named to align with the class. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --

DO NOT REPLY [Bug 51753] When specifying multiple elements, only the applications in the first one with a host called "localhost" are deployed

2011-09-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=51753 niki.dries...@gmail.com changed: What|Removed |Added Status|RESOLVED|CLOSED --- Comment #3 fro

DO NOT REPLY [Bug 51756] Tomcat JDBC Pool does not work with Sybase

2011-09-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=51756 --- Comment #1 from Filip Hanik 2011-09-02 17:18:44 UTC --- what's the value of 'driverURL'? most likely this one is not correct. there is nothing magic calling Driver.connect, if this call is failing. could be a version thing on the URL it