tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 45063] New: JK-1.2. 26 IIS ISAPI filter issue when running different identities running apppools
Date Thu, 22 May 2008 14:16:07 GMT
https://issues.apache.org/bugzilla/show_bug.cgi?id=45063

           Summary: JK-1.2.26 IIS ISAPI filter issue when running different
                    identities running apppools
           Product: Tomcat 4
           Version: Unknown
          Platform: PC
        OS/Version: Windows Server 2003
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Connector:JK/AJP
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: stevemayhugh@yahoo.com


We have seen that the Jakarta Redirect ISAPI filter can crash IIS 6.0 AppPools
in the following senario.

1- Two AppPools are running under the identity of different accounts. (Non
admin accounts.)
2- The first AppPool has started (someone hits the web app associated with it),
if the second AppPool tries to start up, it will fail since the filter is
currently controlled by the first AppPool account.

Basically it comes down to an illegal memory reference being made to the ISAPI
filter.  Since the ISAPI filter works if the user is part of the admin group,
we can suppose that there is a write permissions issue that is covered up by
using elevated accounts.

ChildEBP RetAddr  Args to Child              
0104bc94 7c83d281 0000046c 00000004 00000000
ntdll!RtlpWaitOnCriticalSection+0xdf
0104bcb4 6a6c400b 6a6e11ec 6a6bf741 01cc8310 ntdll!RtlEnterCriticalSection+0xa8
WARNING: Stack unwind information not available. Following frames may be wrong.
0104bcbc 6a6bf741 01cc8310 00000000 6a6e6168
isapi_redirect!TerminateFilter+0x810b
0104bcd0 6a6d2dbf 01cca890 01cc7f90 6a6e6168
isapi_redirect!TerminateFilter+0x3841
0104bcfc 6a6d30f6 01cc8310 00000001 01cc7f90
isapi_redirect!TerminateFilter+0x16ebf
0104bd2c 6a6d2a66 01cc7f90 01cc82f8 00000002
isapi_redirect!TerminateFilter+0x171f6
00000000 00000000 00000000 00000000 00000000
isapi_redirect!TerminateFilter+0x16b66


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Mime
View raw message