tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
Subject DO NOT REPLY [Bug 45063] New: JK-1.2. 26 IIS ISAPI filter issue when running different identities running apppools
Date Thu, 22 May 2008 14:16:07 GMT

           Summary: JK-1.2.26 IIS ISAPI filter issue when running different
                    identities running apppools
           Product: Tomcat 4
           Version: Unknown
          Platform: PC
        OS/Version: Windows Server 2003
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Connector:JK/AJP

We have seen that the Jakarta Redirect ISAPI filter can crash IIS 6.0 AppPools
in the following senario.

1- Two AppPools are running under the identity of different accounts. (Non
admin accounts.)
2- The first AppPool has started (someone hits the web app associated with it),
if the second AppPool tries to start up, it will fail since the filter is
currently controlled by the first AppPool account.

Basically it comes down to an illegal memory reference being made to the ISAPI
filter.  Since the ISAPI filter works if the user is part of the admin group,
we can suppose that there is a write permissions issue that is covered up by
using elevated accounts.

ChildEBP RetAddr  Args to Child              
0104bc94 7c83d281 0000046c 00000004 00000000
0104bcb4 6a6c400b 6a6e11ec 6a6bf741 01cc8310 ntdll!RtlEnterCriticalSection+0xa8
WARNING: Stack unwind information not available. Following frames may be wrong.
0104bcbc 6a6bf741 01cc8310 00000000 6a6e6168
0104bcd0 6a6d2dbf 01cca890 01cc7f90 6a6e6168
0104bcfc 6a6d30f6 01cc8310 00000001 01cc7f90
0104bd2c 6a6d2a66 01cc7f90 01cc82f8 00000002
00000000 00000000 00000000 00000000 00000000

Configure bugmail:
------- You are receiving this mail because: -------
You are the assignee for the bug.

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message