Re: Tomcat7 - invalid keywords on some files

2011-03-10 Thread sebb
On 10 March 2011 12:49, Konstantin Kolinko wrote: > 2011/3/10 sebb : >> Invalid keyword for >> TOMCAT_7_0_11/java/org/apache/tomcat/util/bcel/classfile/SimpleElementValue.java: >>    "Author Date Id Revision" >> Invalid keyword for >> TOMCAT_7_0_11

Re: [VOTE] Release jdbc-pool 1.1.0.1

2011-03-10 Thread sebb
On 10 March 2011 18:50, Filip Hanik - Dev Lists wrote: > On 3/9/2011 11:57 PM, Eiji Takahashi wrote: >> >> Hi developers. >> >> I encountered the same issue, too. >> I got following exception. > > an exception is expected if the connection has been abandoned. > it's tricky, one can always throw a

Re: svn commit: r1085303 - /tomcat/trunk/java/org/apache/catalina/startup/ContextConfig.java

2011-03-25 Thread sebb
On 25 March 2011 09:55, wrote: > Author: markt > Date: Fri Mar 25 09:55:29 2011 > New Revision: 1085303 > > URL: http://svn.apache.org/viewvc?rev=1085303&view=rev > Log: > Fix string comparison - reported by Veracode Findbugs does not catch that? > Modified: >    tomcat/trunk/java/org/apache/ca

Re: svn commit: r1085323 - in /tomcat/trunk/java/org/apache/catalina/mbeans: GroupMBean.java MBeanUtils.java MemoryUserDatabaseMBean.java RoleMBean.java UserMBean.java

2011-03-25 Thread sebb
On 25 March 2011 11:20, wrote: > Author: markt > Date: Fri Mar 25 11:20:50 2011 > New Revision: 1085323 > > URL: http://svn.apache.org/viewvc?rev=1085323&view=rev > Log: > Remove call to System.exit() reported by Veracode and related code clean-up Again, I thought Findbugs checks for System.exit

Re: svn commit: r1087090 - in /tomcat/trunk/modules/jdbc-pool: .classpath build.xml java/ pom.xml src/ src/main/ src/main/java/ src/test/ src/test/java/ test/

2011-03-30 Thread sebb
On 30 March 2011 22:41, wrote: > Author: fhanik > Date: Wed Mar 30 21:40:59 2011 > New Revision: 1087090 > > URL: http://svn.apache.org/viewvc?rev=1087090&view=rev > Log: > Add in ability to build with Maven > > Added: >    tomcat/trunk/modules/jdbc-pool/pom.xml > URL: > http://svn.apache.org/

Re: svn commit: r1087114 - /tomcat/trunk/modules/jdbc-pool/pom.xml

2011-03-30 Thread sebb
On 30 March 2011 23:32, wrote: > Author: fhanik > Date: Wed Mar 30 22:32:29 2011 > New Revision: 1087114 > > URL: http://svn.apache.org/viewvc?rev=1087114&view=rev > Log: > Add in parent reference > Thanks to Sebb http://markmail.org/message/nb652iryypigjfso >

Re: svn commit: r891310 - in /tomcat/tc6.0.x/trunk: STATUS.txt java/org/apache/catalina/loader/WebappClassLoader.java java/org/apache/catalina/security/SecurityClassLoad.java

2009-12-16 Thread sebb
On 16/12/2009, ma...@apache.org wrote: > Author: markt > Date: Wed Dec 16 16:56:22 2009 > New Revision: 891310 > > URL: http://svn.apache.org/viewvc?rev=891310&view=rev <...> > --- > tomcat/tc6.0.x/trunk/java/org/apache/catalina/loader/WebappClassLoader.java > (original) > +++ > tomcat/t

[Tomcat6] Eclipse warnings

2009-12-16 Thread sebb
Eclipse generates many thousands of warnings for the Tomcat6 code. For example, over 2000 missing @Override markers, over 3000 "raw type" warnings. Is it the intention to fix these (eventually)? If so, I can provide some patches to start fixing these. ---

Re: [Tomcat6] Eclipse warnings

2009-12-16 Thread sebb
On 17/12/2009, Konstantin Kolinko wrote: > 2009/12/16 sebb : > > > Eclipse generates many thousands of warnings for the Tomcat6 code. > > > > For example, over 2000 missing @Override markers, over 3000 "raw type" > warnings. > > > > Is it the

Re: [Tomcat6] Eclipse warnings

2009-12-17 Thread sebb
On 17/12/2009, Mark Thomas wrote: > On 16/12/2009 21:31, sebb wrote: > > Eclipse generates many thousands of warnings for the Tomcat6 code. > > > > For example, over 2000 missing @Override markers, over 3000 "raw type" > warnings. > > > >

Re: svn commit: r892341 - /tomcat/trunk/java/org/apache/catalina/session/PersistentManagerBase.java

2009-12-18 Thread sebb
On 18/12/2009, ma...@apache.org wrote: > Author: markt > Date: Fri Dec 18 18:42:09 2009 > New Revision: 892341 > > URL: http://svn.apache.org/viewvc?rev=892341&view=rev > Log: > Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=47930 > Make swapIn thread safe so parallel requests for th

Re: svn commit: r892612 - in /tomcat/trunk: java/org/apache/coyote/ajp/ java/org/apache/coyote/http11/ java/org/apache/tomcat/util/http/ java/org/apache/tomcat/util/http/res/ webapps/docs/config/

2009-12-20 Thread sebb
On 20/12/2009, ma...@apache.org wrote: > Author: markt > Date: Sun Dec 20 17:21:06 2009 > New Revision: 892612 > > URL: http://svn.apache.org/viewvc?rev=892612&view=rev > Log: > Better fix for https://issues.apache.org/bugzilla/show_bug.cgi?id=47963 [...] > --- tomcat/trunk/java/org/apache

Re: svn commit: r892612 - in /tomcat/trunk: java/org/apache/coyote/ajp/ java/org/apache/coyote/http11/ java/org/apache/tomcat/util/http/ java/org/apache/tomcat/util/http/res/ webapps/docs/config/

2009-12-20 Thread sebb
On 20/12/2009, sebb wrote: > On 20/12/2009, ma...@apache.org wrote: > > Author: markt > > Date: Sun Dec 20 17:21:06 2009 > > New Revision: 892612 > > > > URL: http://svn.apache.org/viewvc?rev=892612&view=rev > > Log: > > Better fix fo

Re: svn commit: r895700 - /tomcat/native/trunk/native/build/tcnative.m4

2010-01-05 Thread sebb
On 05/01/2010, Mladen Turk wrote: > On 01/05/2010 11:23 AM, Konstantin Kolinko wrote: > > > 2010/1/5 Rainer Jung: > > > > > > > > Konstantin: JFC is right, it was meant to also check against the third > part > > > of the minimum apr version "1 . 3 . 3". > > > > > > > > > > By the way: you should c

Re: svn commit: r895700 - /tomcat/native/trunk/native/build/tcnative.m4

2010-01-05 Thread sebb
On 05/01/2010, sebb wrote: > On 05/01/2010, Mladen Turk wrote: > > On 01/05/2010 11:23 AM, Konstantin Kolinko wrote: > > > > > 2010/1/5 Rainer Jung: > > > > > > > > > > > Konstantin: JFC is right, it was meant to also check against t

Re: svn commit: r895984 - /tomcat/native/trunk/native/build/tcnative.m4

2010-01-05 Thread sebb
On 05/01/2010, Mladen Turk wrote: > On 01/05/2010 11:57 AM, rj...@apache.org wrote: > > > Author: rjung > > Get rid of nested version test by formatting > > version number as one big decimal. > > > > + decimal_apr_version=`printf %02d%02d%03d ${1} ${2} ${3}` > > + if test "${decimal_apr_version}

Re: Removal of libtcnative-1.dll files from /dist

2010-01-09 Thread sebb
On 09/01/2010, Konstantin Kolinko wrote: > 2010/1/4 Konstantin Kolinko : > > > Hi, all! > > > > I removed the libtcnative-1.dll files of Tomcat Native 1.1.18 from > > www.apache.org/dist/tomcat/tomcat-connectors/native/1.1.18/binaries > > Agreed. > > 5 days passed, and the current status is

Re: Removal of libtcnative-1.dll files from /dist

2010-01-09 Thread sebb
On 09/01/2010, Konstantin Kolinko wrote: > 2010/1/4 Konstantin Kolinko : > > > Hi, all! > > > > I removed the libtcnative-1.dll files of Tomcat Native 1.1.18 from > > www.apache.org/dist/tomcat/tomcat-connectors/native/1.1.18/binaries > > > > > 5 days passed, and the current status is the foll

Re: Removal of libtcnative-1.dll files from /dist

2010-01-09 Thread sebb
On 10/01/2010, Konstantin Kolinko wrote: > 2010/1/9 sebb : > > > On 09/01/2010, Konstantin Kolinko wrote: > >> 2010/1/4 Konstantin Kolinko : > >> > >> > Hi, all! > >> > > >> > I removed the libtcnative-1.dll files of To

Re: svn commit: r897635 - in /tomcat/trunk/java/org/apache/el/parser: AstIdentifier.java AstValue.java SimpleNode.java

2010-01-10 Thread sebb
On 10/01/2010, ma...@apache.org wrote: > Author: markt > Date: Sun Jan 10 13:11:52 2010 > New Revision: 897635 > > URL: http://svn.apache.org/viewvc?rev=897635&view=rev > Log: > Fix the remaining Eclipse warnings in the non-generated classes > > Modified: > tomcat/trunk/java/org/apache/e

Re: [VOTE] Release build 6.0.23

2010-01-14 Thread sebb
On 14/01/2010, jean-frederic clere wrote: > The candidates binaries are available here: > http://people.apache.org/~jfclere/tomcat-6/v6.0.23/ > > According to the release process, the 6.0.23 tag is: > [ ] Broken > [ ] Alpha > [ ] Beta > [ ] Stable The files in the extras/ directory don't ha

Suggestion for handling LF/CRLF EOL conversions.

2010-01-16 Thread sebb
Suggestion for handling LF/CRLF EOL conversions. Some files always need to have the same EOL, for example Windows .BAT and .CMD files always need CRLF. AFAIK, shell scripts always need LF. For such files, set the appropriate svn:eol-style property, so checkouts will always have the correct EOL.

Re: svn commit: r905622 - in /tomcat/trunk: build.xml dist.xml

2010-02-02 Thread sebb
On 02/02/2010, ma...@apache.org wrote: > Author: markt > Date: Tue Feb 2 13:18:32 2010 > New Revision: 905622 > > URL: http://svn.apache.org/viewvc?rev=905622&view=rev > Log: > Merge dist.xml into main build script. > Fix dependencies. > You can now do: > ant download > ant installer >

Re: svn commit: r907537 - /tomcat/trunk/test/org/apache/TestAll.java

2010-02-07 Thread sebb
On 08/02/2010, ma...@apache.org wrote: > Author: markt > Date: Mon Feb 8 01:59:35 2010 > New Revision: 907537 > > URL: http://svn.apache.org/viewvc?rev=907537&view=rev > Log: > Update with recently added tests > > Modified: > tomcat/trunk/test/org/apache/TestAll.java > Is it really nec

Re: svn commit: r910485 - /tomcat/trunk/java/org/apache/catalina/realm/JNDIRealm.java

2010-02-16 Thread sebb
On 16/02/2010, ma...@apache.org wrote: > Author: markt > Date: Tue Feb 16 11:40:55 2010 > New Revision: 910485 > > URL: http://svn.apache.org/viewvc?rev=910485&view=rev > Log: > Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=48589 > Make JNDIRealm easier to extend by making the User

Re: [VOTE] Release Apache Tomcat Native 1.1.20

2010-02-17 Thread sebb
On 17/02/2010, Mladen Turk wrote: > On 02/17/2010 05:12 AM, Konstantin Kolinko wrote: > > > 2010/2/10 Mladen Turk: > > > > > Apache Tomcat Native 1.1.20 is: > > > > > > [x] Stable - no major issues, no regressions > > > > > > > Tested win32 binaries only. > > > > > > Minor: *.md5 and *.sha1 files

Re: svn commit: r919102 - in /tomcat/trunk/java/org/apache/catalina/util: LifecycleBase.java LocalStrings.properties

2010-03-04 Thread sebb
A few more incorrect properties: svn ps svn:eol-style native java/org/apache/catalina/deploy/SessionConfig.java svn ps svn:eol-style native java/org/apache/tomcat/util/bcel/classfile/AnnotationDefault.java svn ps svn:eol-style native java/org/apache/tomcat/util/bcel/classfile/AnnotationEntry.java

Re: net start "Apache tomcat" is not working on java build

2010-03-11 Thread sebb
On 11/03/2010, pannar wrote: > > Anybody, please suggest me how to resolve this issue. > > There will be a workaround, if i know how to call one batch file from > build.bat file, my problem will be resolved. > > anybody knows how to call a batch file inside another batch file? On Windows: CA

Re: net start "Apache tomcat" is not working on java build

2010-03-11 Thread sebb
On 11/03/2010, pannar wrote: > > Thanks! unfortunately, it didn't work. In fact no command is working after > the second line below Because ANT is a command file; you need to CALL that too. > ECHO start building > > e:\ant\bin\ant all -logger org.apache.tools.ant.listener.MailLogger > -prope

Re: svn commit: r922223 - /tomcat/trunk/bin/catalina.bat

2010-03-12 Thread sebb
In 12/03/2010, mt...@apache.org wrote: > Author: mturk > Date: Fri Mar 12 11:38:43 2010 > New Revision: 93 > > URL: http://svn.apache.org/viewvc?rev=93&view=rev > Log: > Suppress anoying Terminate batch job prompt when hitting CTRL+C. Note > however that it leaves the file named yes

Re: svn commit: r927037 - in /tomcat/trunk/java/org/apache/catalina: ha/session/DeltaManager.java session/ManagerBase.java

2010-03-24 Thread sebb
On 24/03/2010, ma...@apache.org wrote: > Author: markt > Date: Wed Mar 24 12:38:23 2010 > New Revision: 927037 > > URL: http://svn.apache.org/viewvc?rev=927037&view=rev > Log: > Simpler fix for https://issues.apache.org/bugzilla/show_bug.cgi?id=48790 > based on a patch by kkolinko > Make ma

Re: svn commit: r927037 - in /tomcat/trunk/java/org/apache/catalina: ha/session/DeltaManager.java session/ManagerBase.java

2010-03-25 Thread sebb
On 25/03/2010, Konstantin Kolinko wrote: > 2010/3/24 sebb : > > > On 24/03/2010, ma...@apache.org wrote: > >> Author: markt > >> Date: Wed Mar 24 12:38:23 2010 > >> New Revision: 927037 > >> > >> URL: http://svn.apache.org/view

Re: svn commit: r928732 - /tomcat/trunk/bin/catalina.sh

2010-03-29 Thread sebb
On 29/03/2010, ma...@apache.org wrote: > Author: markt > Date: Mon Mar 29 11:51:46 2010 > New Revision: 928732 > > URL: http://svn.apache.org/viewvc?rev=928732&view=rev > Log: > Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=48840 > If CDPATH is set, cd may result in output to stdout

Re: svn commit: r928798 - in /tomcat/trunk: java/org/apache/catalina/core/ java/org/apache/catalina/loader/ webapps/docs/config/

2010-03-30 Thread sebb
On 29/03/2010, ma...@apache.org wrote: > Author: markt > Date: Mon Mar 29 15:01:14 2010 > New Revision: 928798 > > URL: http://svn.apache.org/viewvc?rev=928798&view=rev > Log: > Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=48895 > Make clearing thread locals optional and disabled b

Re: svn commit: r928798 - in /tomcat/trunk: java/org/apache/catalina/core/ java/org/apache/catalina/loader/ webapps/docs/config/

2010-03-30 Thread sebb
On 30/03/2010, Konstantin Kolinko wrote: > 2010/3/30 sebb : > > > On 29/03/2010, ma...@apache.org wrote: > >> Author: markt > >> Date: Mon Mar 29 15:01:14 2010 > >> New Revision: 928798 > >> > >> URL: http://svn.apache.or

Re: svn commit: r932717 - /tomcat/tc5.5.x/trunk/STATUS.txt

2010-04-10 Thread sebb
On 10/04/2010, kkoli...@apache.org wrote: > Author: kkolinko > Date: Sat Apr 10 13:44:05 2010 > New Revision: 932717 > > URL: http://svn.apache.org/viewvc?rev=932717&view=rev > Log: > change my vote > > Modified: > tomcat/tc5.5.x/trunk/STATUS.txt > > Modified: tomcat/tc5.5.x/trunk/STATU

Re: svn commit: r933165 - /tomcat/trunk/java/org/apache/catalina/tribes/io/ChannelData.java

2010-04-12 Thread sebb
On 12/04/2010, Mark Thomas wrote: > On 12/04/2010 11:53, Tim Funk wrote: > > This seems like an odd thing to make a constant. (Is something else > > setting this or was there an intention for this to be set? Especially > > since it is used only once in this file) > > > It isn't entirely clear.

Re: svn commit: r933165 - /tomcat/trunk/java/org/apache/catalina/tribes/io/ChannelData.java

2010-04-13 Thread sebb
e to fix an errors such as this. It will be very difficult to fix any such errors later (as you point out). > Filip > > > On 04/12/2010 12:59 PM, sebb wrote: > > > On 12/04/2010, Mark Thomas wrote: > > > > > > > On 12/04/2010 11:53, Tim Funk wrot

Re: svn commit: r933165 - /tomcat/trunk/java/org/apache/catalina/tribes/io/ChannelData.java

2010-04-14 Thread sebb
atile. Is the current API really immutable at this stage? > Mark > > > > > > Filip > > > > On 04/12/2010 12:59 PM, sebb wrote: > >> On 12/04/2010, Mark Thomas wrote: > >> > >>> On 12/04/2010 11:53, Tim Funk wrote: > >>&

Re: [VOTE] Release Tomcat 7.0.0 based on Tomcat 7.0.0 RC1

2010-04-14 Thread sebb
On 14/04/2010, Mark Thomas wrote: > All, > > After the experience of the recent 6.0.x releases, I wanted to try an > alternative approach and use explicit release candidates for 7.0.x. I'm > expecting to tweak the release process as we go. > > The first Tomcat 7 release candiate is ready for t

Re: [VOTE] Release Tomcat 7.0.0 based on Tomcat 7.0.0 RC1

2010-04-14 Thread sebb
ta based on 7.0.0-RC1 > > [X] Stable - go ahead and release 7.0.0 Stable based on 7.0.0-RC1 > > > > > > Tested on win32 and linux, both with and without native. > Even SSL renegotiation works :) > > Sadly sebb blocked my daemon 1.0.3 release because of few comment

Re: [VOTE] Release Tomcat 7.0.0 based on Tomcat 7.0.0 RC1

2010-04-14 Thread sebb
On 14/04/2010, Mark Thomas wrote: > All, > > After the experience of the recent 6.0.x releases, I wanted to try an > alternative approach and use explicit release candidates for 7.0.x. I'm > expecting to tweak the release process as we go. > > The first Tomcat 7 release candiate is ready for t

Re: [VOTE] Release Tomcat 7.0.0 based on Tomcat 7.0.0 RC1

2010-04-14 Thread sebb
On 14/04/2010, Mark Thomas wrote: > On 14/04/2010 21:06, sebb wrote: > > Many of the java and xml files in tomcat-lite don't have AL headers. > > Not an issue. tomcat-lite isn't being shipped (at least it shoudln't be..) It's currently in the source archives.

Re: [VOTE] Release Tomcat 7.0.0 based on Tomcat 7.0.0 RC1

2010-04-14 Thread sebb
On 14/04/2010, William A. Rowe Jr. wrote: > On 4/14/2010 4:22 PM, sebb wrote: > > > > Also, SVN is considered by some to be publishing code (e.g. links are > > usually published on the web-site) so better safe than sorry. > > > SVN is a development/work produ

Re: [VOTE] Release Tomcat 7.0.0 based on Tomcat 7.0.0 RC1

2010-04-14 Thread sebb
On 14/04/2010, Mark Thomas wrote: > On 14/04/2010 21:06, sebb wrote: ... > > There is a minor problem with the bin/tomcat-juli.jar - the NOTICE says: > > Copyright 19...@year@ > > I'll take a look. > Same problem in ex

Re: [VOTE] Release Tomcat 7.0.0 based on Tomcat 7.0.0 RC1

2010-04-14 Thread sebb
;Just wonder does Tomcat 7 RC fully support Servlet 3.0 ? The last time I > check it, it seems that ServletContainerInitializer has not been implemented > yet. > Thanks ! > > 2010/4/15 sebb > > > > On 14/04/2010, Mark Thomas wr

Re: [VOTE] Release Tomcat 7.0.0 based on Tomcat 7.0.0 RC1

2010-04-14 Thread sebb
notes and the code ;-) > 2010/4/15 sebb > > > The RELEASE-NOTES file says: > > > > > > = > > Bundled APIs: > > = > > A standard installation of Tomcat 7.0 makes all of the following APIs > > available > &g

Re: [VOTE] Release Tomcat 7.0.0 based on Tomcat 7.0.0 RC1

2010-04-15 Thread sebb
On 15/04/2010, Mark Thomas wrote: > On 15/04/2010 01:31, sebb wrote: > > > On 14/04/2010, Mark Thomas wrote: > > > > > On 14/04/2010 21:06, sebb wrote: > > > > > > > ... > > > > > > > > There is a minor problem with the

Re: svn commit: r935092 - /tomcat/trunk/TOMCAT-7-RELEASE-PLAN.txt

2010-04-16 Thread sebb
On 16/04/2010, ma...@apache.org wrote: > Author: markt > Date: Fri Apr 16 22:39:55 2010 > New Revision: 935092 > > URL: http://svn.apache.org/viewvc?rev=935092&view=rev > Log: > More checking against the spec > > Modified: > tomcat/trunk/TOMCAT-7-RELEASE-PLAN.txt > > Modified: tomcat/tr

Re: svn commit: r937309 - in /tomcat/trunk/java/org/apache: catalina/realm/ catalina/session/ catalina/startup/ catalina/util/ tomcat/util/modeler/modules/

2010-04-23 Thread sebb
On 23/04/2010, ma...@apache.org wrote: > Author: markt > Date: Fri Apr 23 14:23:45 2010 > New Revision: 937309 > > URL: http://svn.apache.org/viewvc?rev=937309&view=rev > Log: > Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=49143 > Threading / initialisation issues. Not all were val

Re: .classpath and .project in src distribution (was: svn commit: r937993)

2010-04-27 Thread sebb
On 27/04/2010, Konstantin Kolinko wrote: > 2010/4/26 : > > Author: pero > > Date: Mon Apr 26 10:46:01 2010 > > New Revision: 937993 > > > > URL: http://svn.apache.org/viewvc?rev=937993&view=rev > > Log: > > Include .project and .classpath files to src distribution. > > s. http://ant.apach

Re: svn commit: r939320 - in /tomcat/trunk/modules: jdbc-pool/doc/ tomcat-lite/java/org/apache/tomcat/lite/servlet/ tomcat-lite/java/org/apache/tomcat/lite/util/

2010-04-29 Thread sebb
On 29/04/2010, kkoli...@apache.org wrote: > Author: kkolinko > Date: Thu Apr 29 14:23:46 2010 > New Revision: 939320 > > URL: http://svn.apache.org/viewvc?rev=939320&view=rev > Log: > Set svn:keywords=Id where there is unexpanded $Id$ keyword in the files Just a thought - could perhaps remov

Re: svn commit: r939320 - in /tomcat/trunk/modules: jdbc-pool/doc/ tomcat-lite/java/org/apache/tomcat/lite/servlet/ tomcat-lite/java/org/apache/tomcat/lite/util/

2010-04-29 Thread sebb
On 29/04/2010, Konstantin Kolinko wrote: > 2010/4/29 sebb : > > > On 29/04/2010, kkoli...@apache.org wrote: > >> Author: kkolinko > >> Date: Thu Apr 29 14:23:46 2010 > >> New Revision: 939320 > >> > >> URL: http://svn.apa

Re: buildbot exception in ASF Buildbot on tomcat-8-trunk

2015-10-05 Thread sebb
On 5 October 2015 at 06:08, Christopher Schultz wrote: > All, > > On 10/5/15 12:22 AM, build...@apache.org wrote: >> The Buildbot has detected a build exception on builder tomcat-8-trunk while >> building ASF Buildbot. Full details are available at: >> http://ci.apache.org/builders/tomcat-8-t

Re: [SECURITY] CVE-2015-5345 Apache Tomcat Directory disclosure

2016-02-22 Thread sebb
On 22 February 2016 at 11:23, Mark Thomas wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > CVE-2015-5345 Apache Tomcat Directory disclosure > > Severity: Low > > Vendor: The Apache Software Foundation > > Versions Affected: > - - Apache Tomcat 6.0.0 to 6.0.44 > - - Apache Tomcat 7.0.

Re: svn commit: r1817993 - /gump/metadata/project/tomcat-trunk.xml

2017-12-15 Thread sebb
On 14 December 2017 at 15:20, Mark Thomas wrote: > On 14/12/17 13:18, Konstantin Kolinko wrote: >> Hi, Mark! >> >> To dev@tomcat, cc: general@gump. >> >> >> The result of this change is that Gump building Tomcat downloads >> tar.gz for Commons-Daemon from mirrors. > > Drat. That wasn't the intenti

Re: [ANN] Apache Tomcat 7.0.84 released

2018-01-25 Thread sebb
Might be an idea to include a link to the main Tomcat page somewhere in the announce? On 25 January 2018 at 08:44, Violeta Georgieva wrote: > The Apache Tomcat team announces the immediate availability of Apache > Tomcat 7.0.84. > > Apache Tomcat is an open source software implementation of the J

Fwd: Error when processing doap file http://svn.apache.org/repos/asf/tomcat/site/trunk/docs/doap_Tomcat.rdf:

2019-02-27 Thread sebb
Please can you fix the syntax error in the DOAP? -- Forwarded message - From: Projects Date: Wed, 27 Feb 2019 at 02:03 Subject: Error when processing doap file http://svn.apache.org/repos/asf/tomcat/site/trunk/docs/doap_Tomcat.rdf: To: Site Development URL: http://svn.apache.or

Re: svn commit: r1681300 - in /tomcat/native/trunk: build.properties.default build.xml java/ java/org/ java/org/apache/ java/org/apache/tomcat/ java/org/apache/tomcat/Apr.java java/org/apache/tomcat/a

2015-06-19 Thread sebb
On 23 May 2015 at 10:44, wrote: > Author: rjung > Date: Sat May 23 09:44:41 2015 > New Revision: 1681300 > > URL: http://svn.apache.org/r1681300 > Log: > Make tcnative trunk more consistent with 1.1 branch: > > - use externals for jni Java classes, but here > pointing to TC trunk > > - remove d

Re: svn commit: r1686432 - /tomcat/trunk/java/org/apache/tomcat/util/http/FastHttpDateFormat.java

2015-06-19 Thread sebb
On 19 June 2015 at 16:16, wrote: > Author: remm > Date: Fri Jun 19 15:16:51 2015 > New Revision: 1686432 > > URL: http://svn.apache.org/r1686432 > Log: > Remove unused shared formats. > > Modified: > tomcat/trunk/java/org/apache/tomcat/util/http/FastHttpDateFormat.java > > Modified: > tomcat

Re: svn commit: r1686442 - /tomcat/trunk/java/org/apache/tomcat/util/http/FastHttpDateFormat.java

2015-06-19 Thread sebb
On 19 June 2015 at 17:06, wrote: > Author: remm > Date: Fri Jun 19 16:06:55 2015 > New Revision: 1686442 > > URL: http://svn.apache.org/r1686442 > Log: > Add IAE, although it cannot happen. > > Modified: > tomcat/trunk/java/org/apache/tomcat/util/http/FastHttpDateFormat.java > > Modified: >

Re: Recreate missing TC commit emails

2014-12-06 Thread sebb
On 6 December 2014 at 13:19, Rainer Jung wrote: > The following commit emails are missing currently for the TC project: > > r1643041 > r1643045 > r1643054 > r1643055 > r1643065 > r1643066 > r1643069 > r1643100 > r1643104 > r1643109 > r1643121 > r1643126 > > The list was crated by comparing the mai

Re: Recreate missing TC commit emails

2014-12-06 Thread sebb
On 6 December 2014 at 16:48, Rainer Jung wrote: > Am 06.12.2014 um 15:17 schrieb sebb: >> >> On 6 December 2014 at 13:19, Rainer Jung wrote: >>> >>> The following commit emails are missing currently for the TC project: >>> > ... > >>> T

Re: [SECURITY] CVE-2014-0227 Apache Tomcat Request Smuggling

2015-02-09 Thread sebb
On 9 February 2015 at 09:12, Mark Thomas wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > CVE-2014-0227 Request Smuggling > > Severity: Important > > Vendor: The Apache Software Foundation > > Versions Affected: > - - Apache Tomcat 8.0.0-RC1 to 8.0.8 > - - Apache Tomcat 7.0.0 to 7.0.54

Re: Tagging 7.0.47

2013-10-17 Thread sebb
Please note https://issues.apache.org/bugzilla/show_bug.cgi?id=55663 The text in the NOTICE file is wrong. On 17 October 2013 13:15, Violeta Georgieva wrote: > Hi, > > I'm starting with Tomcat 7.0.47 tagging. > > Regards > Violeta

Re: [ANN] Apache Tomcat Native 1.1.29 released

2013-12-16 Thread sebb
On 15 October 2013 14:53, Mladen Turk wrote: > The Apache Tomcat team announces the immediate availability of Apache > Tomcat Native 1.1.29 stable. Please can someone now remove the old version? https://dist.apache.org/repos/dist/release/tomcat/tomcat-connectors/native/1.1.28/ -

Re: svn commit: r1551729 - /tomcat/tc7.0.x/trunk/test/org/apache/catalina/websocket/TestWebSocket.java

2013-12-17 Thread sebb
On 17 December 2013 21:43, wrote: > Author: rjung > Date: Tue Dec 17 21:43:02 2013 > New Revision: 1551729 > > URL: http://svn.apache.org/r1551729 > Log: > Fix occasional test failure. > > The WebSocketClient first read headers via > a BufferedReader, then tried to read the body > via the underly

Re: [ANN] Apache Tomcat Native 1.1.29 released

2013-12-19 Thread sebb
Thanks! On 19 December 2013 10:09, Konstantin Kolinko wrote: > 2013/12/16 sebb : >> On 15 October 2013 14:53, Mladen Turk wrote: >>> The Apache Tomcat team announces the immediate availability of Apache >>> Tomcat Native 1.1.29 stable. >> >> Please

Re: [VOTE] Release Apache Tomcat 8.0.0-RC10

2013-12-19 Thread sebb
On 19 December 2013 18:38, Mark Thomas wrote: > The proposed Apache Tomcat 8.0.0 release candidate 10 is now available > for voting. > > Given this is a release candidate I am working on the basis that it is > equivalent to an alpha. The main changes since RC5 are: > - Better handling of generic t

Re: [Tomcat Wiki] Update of "Cookies" by markt

2014-01-01 Thread sebb
On 1 January 2014 18:32, Jeremy Boynes wrote: > On Dec 31, 2013, at 12:46 PM, Mark Thomas wrote: > >> Signed PGP part >> On 31/12/2013 20:29, Mark Thomas wrote: >> > On 31/12/2013 17:03, Jeremy Boynes wrote: >> >> On Dec 31, 2013, at 3:55 AM, Mark Thomas >> >> wrote: >> > >> >>> On 31/12/2013 11

Re: Permissions to create release directory for taglibs?

2014-01-02 Thread sebb
On 2 January 2014 22:24, Jeremy Boynes wrote: > On Dec 29, 2013, at 3:10 PM, Mark Thomas wrote: >> >> > I’ve uploaded a copy of the source release here: >> > https://dist.apache.org/repos/dist/dev/tomcat/taglibs/taglibs-standard-1.2.1/ >> > >> > Is that what you had in mind? Do I just svn mv tha

Re: Improvement fo org.apache.tomcat.util.net.jsse.JSSESupport class

2014-02-05 Thread sebb
On 5 February 2014 15:14, Mark Thomas wrote: > On 05/02/2014 14:56, Maxim Kirilov wrote: >> Hi, >> >> I've noticed that some code inside *handshake()* method can be omitted. >> After executing the >> call to: *ssl.startHandshake()*, according to SSLSocket >>

Re: ASF svn server certficate + svn client

2014-02-21 Thread sebb
The certs were changed recently. The new fingerprints should be on the infra website somewhere. A quick search found the outdated details for svn.apache.org: http://www.apache.org/dev/version-control.html#cert The uptodate list seems to be here: http://www.apache.org/dev/machines.html#ssl-keys

Re: ASF svn server certficate + svn client

2014-02-21 Thread sebb
On 21 February 2014 16:09, sebb wrote: > The certs were changed recently. The new fingerprints should be on the > infra website somewhere. > > A quick search found the outdated details for svn.apache.org: > > http://www.apache.org/dev/version-control.html#cert I've upda

Re: Git

2014-02-24 Thread sebb
AIUI SVN will still be mandated by Infra for - release publishing - site publishing Release publishing should not cause an issue. However site publishing may perhaps be tricker to do from a GIT repo; might need to consider leaving site docs in SVN. On 24 February 2014 17:43, Jeremy Boynes wrote

Fwd: Cannot find doap file: http://svn.apache.org/repos/asf/tomcat/taglibs/rdc/trunk/doap_rdc.rdf

2020-04-29 Thread sebb
Please can someone update https://svn.apache.org/repos/asf/comdev/projects.apache.org/trunk/data/projects.xml with the new location of the DOAP? Thanks. -- Forwarded message - From: Projects Date: Wed, 29 Apr 2020 at 03:01 Subject: Cannot find doap file: http://svn.apache.org/repo

Re: git (yet again)

2014-09-02 Thread sebb
On 2 September 2014 20:25, Filip Hanik wrote: > On Tue, Sep 2, 2014 at 10:52 AM, Rémy Maucherat wrote: > >> 2014-09-02 18:41 GMT+02:00 Mark Thomas : >> >> > I'm leaning towards A myself. >> > > > The move to git clears a huge hurdle, and that is managing contributions. > The patch system is very

Re: git (yet again)

2014-09-03 Thread sebb
On 3 September 2014 10:41, Rainer Jung wrote: > > Am 02.09.2014 um 18:41 schrieb Mark Thomas: > >> I've been looking at this again (anything to get a break from writing >> parsers for cookies) and chatting with some of the infra folks that look >> after the ASF's git repos. >> >> There are a coupl

Re: git (yet again)

2014-09-03 Thread sebb
On 3 September 2014 16:10, Martin Grigorov wrote: > On Wed, Sep 3, 2014 at 2:54 PM, Stefan Bodewig wrote: > >> On 2014-09-03, sebb wrote: >> >> > Maybe it's possible to configure the commit messages so that diffs are >> > shown; if not, then perhaps

Re: svn commit: r1622302 - in /tomcat/tc7.0.x/trunk: ./ java/org/apache/catalina/connector/Request.java test/org/apache/catalina/connector/TestRequest.java test/org/apache/catalina/connector/TesterReq

2014-09-14 Thread sebb
On 4 September 2014 10:52, Mark Thomas wrote: > On 04/09/2014 10:50, Mark Thomas wrote: >> On 04/09/2014 10:16, Mark Thomas wrote: >>> On 04/09/2014 10:11, Mark Thomas wrote: On 04/09/2014 08:05, Martin Grigorov wrote: > On Wed, Sep 3, 2014 at 8:37 PM, wrote: > >> Author: markt >

Tomcat BCEL and Commons BCEL

2014-09-14 Thread sebb
It seems that Tomcat's version of BCEL is diverging significantly from Commons BCEL. Is there any mileage in trying to re-organise Commons BCEL so it is more easily usable by Tomcat? For example, I gather that Tomcat only uses a small portion of Commons BCEL. Maybe the Commons code could be divid

Re: svn commit: r1629770 - /tomcat/jk/trunk/xdocs/miscellaneous/changelog.xml

2014-10-07 Thread sebb
On 6 October 2014 22:38, wrote: > Author: rjung > Date: Mon Oct 6 21:38:24 2014 > New Revision: 1629770 > > URL: http://svn.apache.org/r1629770 > Log: > Typo in changelog. > > Modified: > tomcat/jk/trunk/xdocs/miscellaneous/changelog.xml > > Modified: tomcat/jk/trunk/xdocs/miscellaneous/chan

Re: [Bug 56248] Automatic deployment with TCD deletes customized context.xml file

2014-03-13 Thread sebb
On 13 March 2014 15:30, wrote: > https://issues.apache.org/bugzilla/show_bug.cgi?id=56248 > > Mark Thomas changed: > >What|Removed |Added > > Status|NEW

Re: [off-list] Heartbleed info

2014-04-14 Thread sebb
On 14 April 2014 21:34, Mark Thomas wrote: > On 14/04/2014 20:45, Tim Whittington wrote: >> >> On 15/04/2014, at 1:26 am, Christopher Schultz >> wrote: >> >>> Mark, >>> >>> On 4/13/14, 10:29 AM, Mark Thomas wrote: On 13/04/2014 08:18, Christopher Schultz wrote: > Mark, > > On 4/

Re: [Bug 50078] Concurrent access to WeakHashMap in ConcurrentCache causes infinite loop, 100% CPU usage

2014-04-16 Thread sebb
On 16 April 2014 11:04, Mark Thomas wrote: > On 16/04/2014 10:56, Konstantin Kolinko wrote: >> 2014-04-16 13:48 GMT+04:00 Mark Thomas : >>> On 16/04/2014 10:36, bugzi...@apache.org wrote: https://issues.apache.org/bugzilla/show_bug.cgi?id=50078 --- Comment #4 from Andrea Wilson ---

Re: [Tomcat Wiki] Update of "Security/Heartbleed" by KonstantinKolinko

2014-04-18 Thread sebb
On 18 April 2014 14:56, Apache Wiki wrote: > The "Security/Heartbleed" page has been changed by KonstantinKolinko: > https://wiki.apache.org/tomcat/Security/Heartbleed?action=diff&rev1=10&rev2=11 > + 1. Update OpenSSL to a version that includes the fix. The natural version > number for this is

Re: svn commit: r1440892 - in /tomcat/maven-plugin/trunk/tomcat7-war-runner/src/main/java/org/apache/tomcat/maven/runner: Tomcat7Runner.java Tomcat7RunnerCli.java

2013-01-31 Thread sebb
On 31 January 2013 09:58, wrote: > Author: olamy > Date: Thu Jan 31 09:58:49 2013 > New Revision: 1440892 > > URL: http://svn.apache.org/viewvc?rev=1440892&view=rev > Log: > fix possible values for clientAuth > > Modified: > > tomcat/maven-plugin/trunk/tomcat7-war-runner/src/main/java/org/ap

Re: Checkstyle errors in storeconfig in trunk

2013-02-09 Thread sebb
On 9 February 2013 09:42, Remy Maucherat wrote: > On Sat, 2013-02-09 at 05:19 +0400, Konstantin Kolinko wrote: >> 2013/2/8 Konstantin Kolinko : >> > Hi! >> > >> > FYI, there are a lot of checkstyle errors in o.a.c.storeconfig package, >> > >> > a) tabs in server-registry.xml >> > b) a lot of trail

Re: [Tomcat Wiki] Update of "LocalBadContent" by KonstantinKolinko

2013-03-19 Thread sebb
On 19 March 2013 16:06, Apache Wiki wrote: > Dear Wiki user, > > You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for > change notification. > > The "LocalBadContent" page has been changed by KonstantinKolinko: > http://wiki.apache.org/tomcat/LocalBadContent?action=diff&rev1=8

Re: [Tomcat Wiki] Update of "LocalBadContent" by ChuckCaldarale

2013-03-19 Thread sebb
On 18 March 2013 21:54, Mark Thomas wrote: > On 18/03/2013 21:46, Apache Wiki wrote: >> Dear Wiki user, >> >> You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for >> change notification. >> >> The "LocalBadContent" page has been changed by ChuckCaldarale: > > I've raised it be

Re: [Tomcat Wiki] Update of "LocalBadContent" by ChuckCaldarale

2013-03-21 Thread sebb
On 21 March 2013 17:48, Apache Wiki wrote: > Dear Wiki user, > > You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for > change notification. > > The "LocalBadContent" page has been changed by ChuckCaldarale: > http://wiki.apache.org/tomcat/LocalBadContent?action=diff&rev1=97&r

Re: Use of JAXB api to process Base64 in Tomcat 7 and 8

2013-03-21 Thread sebb
On 21 March 2013 09:39, Mark Thomas wrote: > On 21/03/2013 05:35, Konstantin Kolinko wrote: >> Hi! >> >> Recent Mark's commits in Tomcat 7, 8 replaced custom >> implementations(*) of base64 >> with use of the following class from JAXB: >> >> javax.xml.bind.DatatypeConverter >> >> This affects base

Re: [Tomcat Wiki] Update of "LocalBadContent" by KonstantinKolinko

2013-04-16 Thread sebb
On 15 April 2013 15:43, Konstantin Kolinko wrote: > 2013/4/15 Pid : > > Is it me or has the wiki-spam been on the increase lately? > > > > Yes, > > I think it a constant stream, started a month ago. > > When I added some common phrases to the filter page (like "my\s+name") > it slowed for a week

Re: [Tomcat Wiki] Update of "LocalBadContent" by ChuckCaldarale

2013-04-25 Thread sebb
Is all of that URL spammy? I specifically included most of the path because I thought there might be valid content elsewhere on the site. On 25 April 2013 13:46, Apache Wiki wrote: > Dear Wiki user, > > You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for > change notificat

Re: svn commit: r1479953 - in /tomcat/tc7.0.x/trunk: ./ java/org/apache/tomcat/util/http/parser/HttpParser.java test/org/apache/tomcat/util/http/parser/TestMediaType.java webapps/docs/changelog.xml

2013-05-08 Thread sebb
On 7 May 2013 16:54, wrote: > Author: markt > Date: Tue May 7 15:54:36 2013 > New Revision: 1479953 > > URL: http://svn.apache.org/r1479953 > Log: > Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=54703 > Be tolerant of applications that pass CR or LF in setHeader() values. > Fix some whi

Re: OT: How do I subscribe to the Tomcat Dev/User lists with my @apache.org address?

2013-05-14 Thread sebb
On 15 May 2013 00:37, Christopher Schultz wrote: > Nick, > > On 5/14/13 6:35 PM, Nick Williams wrote: >> I recently became a committer on the Logging project and thus I now have an >> @apache.org address. Since it's a forwarding address, I'm having it forward >> to my Google Apps email address (

Re: Jar scanning, SCI scanning, fragment scanning

2013-06-14 Thread sebb
On 14 June 2013 17:35, Christopher Schultz wrote: > Mark, > > On 6/14/13 12:21 PM, Mark Thomas wrote: >> On 14/06/2013 16:57, Christopher Schultz wrote: >>> Mark, >>> >>> On 6/14/13 3:16 AM, Mark Thomas wrote: On 14/06/2013 03:31, Christopher Schultz wrote: > It might be nice if this

Re: CVE-2013-1571, VU#225657

2013-06-19 Thread sebb
On 19 June 2013 09:15, Mark Thomas wrote: > On 19/06/2013 00:42, Nick Williams wrote: >> >> Oracle has announced a Javadoc vulnerability (CVE-2013-1571 [1], >> VU#225657 [2]) whereby Javadoc generated with Java 5, Java 6, or Java >> 7 < 7u25 is vulnerable to a frame injection attack. Oracle has >>

Re: CVE-2013-1571, VU#225657

2013-06-19 Thread sebb
On 19 June 2013 13:03, Nick Williams wrote: > > On Jun 19, 2013, at 3:15 AM, Mark Thomas wrote: > >> On 19/06/2013 00:42, Nick Williams wrote: >>> Oracle has announced a Javadoc vulnerability (CVE-2013-1571 [1], >>> VU#225657 [2]) whereby Javadoc generated with Java 5, Java 6, or Java >>> 7 < 7u25

Re: CVE-2013-1571, VU#225657

2013-06-19 Thread sebb
On 19 June 2013 13:12, sebb wrote: > On 19 June 2013 13:03, Nick Williams wrote: >> >> On Jun 19, 2013, at 3:15 AM, Mark Thomas wrote: >> >>> On 19/06/2013 00:42, Nick Williams wrote: >>>> Oracle has announced a Javadoc vulnerability (CVE-2013-157

<    1   2   3   4   5   >