tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 36741] New: - ArrayIndexOutOfBoundsException in org.apache.coyote.http11.InternalOutputBuffer.write
Date Tue, 20 Sep 2005 19:24:52 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=36741>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=36741

           Summary: ArrayIndexOutOfBoundsException in
                    org.apache.coyote.http11.InternalOutputBuffer.write
           Product: Tomcat 5
           Version: 5.0.28
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P3
         Component: Connector:HTTP
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: greg-apache-bugs@nest.cx


There are possible buffer overflows in InternalOutputBuffer. I am
attaching patches to dynamically flush buf when it is full. 

One way to trigger this exception is to add a header to the response
which will be longer than maxHttpHeaderSize parameter (4K by default).

Here is a typical stack trace:

ArrayIndexOutOfBoundsException: 37522952
at
org.apache.coyote.http11.InternalOutputBuffer.write(InternalOutputBuffer.java(Inline

at
org.apache.coyote.http11.InternalOutputBuffer.sendHeader(InternalOutputBuffer.java(I

at
org.apache.coyote.http11.Http11Processor.prepareResponse(Http11Processor.java(Compil

at org.apache.coyote.http11.Http11Processor.action(Http11Processor.java(Compiled
Code))
at org.apache.coyote.Response.action(Response.java(Inlined Compiled Code))
at org.apache.coyote.Response.sendHeaders(Response.java(Inlined Compiled Code))
at org.apache.coyote.tomcat5.OutputBuffer.doFlush(OutputBuffer.java(Compiled Code))
at org.apache.coyote.tomcat5.OutputBuffer.close(OutputBuffer.java(Compiled Code))
at
org.apache.coyote.tomcat5.CoyoteResponse.finishResponse(CoyoteResponse.java(Compiled

at org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java(Compiled
Code))
at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java(Compiled Code)

at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Ht

at
org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java(Compiled Code)

at
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:683)
at java.lang.Thread.run(Thread.java:568)

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org


Mime
View raw message