tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 4361] - SsiServlet potentially leaks files
Date Tue, 23 Oct 2001 19:39:57 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=4361>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=4361

SsiServlet potentially leaks files





------- Additional Comments From pspeed@progeeks.com  2001-10-23 12:39 -------
I can't recreate the error here but I did happen to notice something as I was 
browsing through the code.  Each SsiInvokerServlet request causes it to open the 
requested file as a Resource.  The InputStream that is obtained from this 
Resource is never closed.  I tried to poke around in the Resource classes to see 
if some magic was closing the stream but couldn't find anything.

I can attach a patch if needed, but the change is pretty simple.  Just a 
try/finally with a close().

Mime
View raw message