Return-Path: X-Original-To: apmail-struts-issues-archive@minotaur.apache.org Delivered-To: apmail-struts-issues-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 076A2109F5 for ; Wed, 11 Sep 2013 09:27:31 +0000 (UTC) Received: (qmail 22670 invoked by uid 500); 11 Sep 2013 09:26:58 -0000 Delivered-To: apmail-struts-issues-archive@struts.apache.org Received: (qmail 21874 invoked by uid 500); 11 Sep 2013 09:26:55 -0000 Mailing-List: contact issues-help@struts.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@struts.apache.org Delivered-To: mailing list issues@struts.apache.org Received: (qmail 21224 invoked by uid 99); 11 Sep 2013 09:26:52 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 11 Sep 2013 09:26:52 +0000 Date: Wed, 11 Sep 2013 09:26:52 +0000 (UTC) From: "Lukasz Lenart (JIRA)" To: issues@struts.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Assigned] (WW-4113) Bug in Ognl 3.0.5 / 3.0.6 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/WW-4113?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Lukasz Lenart reassigned WW-4113: --------------------------------- Assignee: Lukasz Lenart > Bug in Ognl 3.0.5 / 3.0.6 > ------------------------- > > Key: WW-4113 > URL: https://issues.apache.org/jira/browse/WW-4113 > Project: Struts 2 > Issue Type: Bug > Components: Expression Language > Affects Versions: 2.3.4, 2.3.4.1, 2.3.7, 2.3.8, 2.3.12, 2.3.14, 2.3.14.1, 2.3.14.2, 2.3.14.3, 2.3.15 > Reporter: Kevin Su > Assignee: Lukasz Lenart > Labels: patch > Fix For: 2.3.17 > > > Struts since 2.3.4 (maybe earlier as well) has dependency on ognl.OgnlRuntime 3.0.5 / 3.0.6. OgnlRuntime 3.0.5/3.0.6 has a bug in the cache implementation to look up the getter and setter methods. The hashCode of the action class (in combination to the hashCode for the name of the property) is used as a unique key into the cache of getter and setters. > Since hashCode can not be relied on to be unique, setting the property on the target action class may fail because the wrong method from another action is returned. > The latest implemenation of OgnlRuntime in Apache commons has the proper implementation. > We are currently using our own patched version of 3.0.6 to work around the issue. However, we'll like to see this resolved so we don't need to maintain our own private version of Ognl. > Is there a plan to migrate the dependency to the Apache commons distribution of Ognl? If not, we'll be happy to share our fix. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira