Thanks for the pointer to org.apache.catalina.connector.RECYCLE_FACADES. I will try running our integration server with that set both ways and compare.
I don't see how an application bug could cause the same RequestFacade to be passed to the webapp on two thread concurrently, however. I'm not guessing about that. I added debugging code to my app and managed to stop in the debugger, and I could see two http-nio-8080-exec- threads with the same object. Matt On Tue, Dec 6, 2016 at 2:58 PM, Caldarale, Charles R < chuck.caldar...@unisys.com> wrote: > From: Matthew Bellew [mailto:matth...@labkey.com] > > Subject: Re: Same request object passed to two threads > > This should be on the users' mailing list, not dev. > > > Just realized that in the case above, I couldn't have hit the quoted > code, > > since neither call to AuthFilter.doFilter() had returned. > > > I can build and debug Tomcat, so any advice would be very welcome. > > Debug your webapp, not Tomcat. In pretty much 100% of these cases, the > logic in a servlet or filter of the webapp is erroneously storing the > reference to the request object in a static, instance, or thread-local > field, resulting in the wrong request object being used by another thread > or later in the current thread. > > You might try setting org.apache.catalina.connector.RECYCLE_FACADES to > see if it catches the problem. > http://tomcat.apache.org/tomcat-8.5-doc/config/systemprops.html#Security > > - Chuck > > > THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY > MATERIAL and is thus for use only by the intended recipient. If you > received this in error, please contact the sender and delete the e-mail and > its attachments from all computers. > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org > For additional commands, e-mail: dev-h...@tomcat.apache.org > >
