[Bug 67300] New: Suspected HTTP request smuggling vulnerability

2023-09-08 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=67300 Bug ID: 67300 Summary: Suspected HTTP request smuggling vulnerability Product: Tomcat 9 Version: 9.0.75 Hardware: PC OS: Linux Status: NEW Severity: nor

[Bug 66684] SSL HandShake failed when crlFile linked to an empty file

2023-09-08 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66684 DigitalCat changed: What|Removed |Added Status|RESOLVED|REOPENED Resolution|INVALID

[Bug 66684] SSL HandShake failed when crlFile linked to an empty file

2023-09-08 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66684 --- Comment #11 from DigitalCat --- Configure crlFile="server.crl" in the server.xml file. Use the curl -ivk --cert server.crt --key server.key -X GET 'https://XX:8542' is used to check the certificate status. If you need to use the file p

[Bug 66684] SSL HandShake failed when crlFile linked to an empty file

2023-09-08 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66684 --- Comment #12 from DigitalCat --- Creating a Certificate 1. Generate a certificate private key file and save it as server.key. The 3des algorithm is used. The key length is 2048 bytes. openssl genrsa -des3 -out server.key 2048 2. Generate the

[Bug 67300] Suspected HTTP request smuggling vulnerability

2023-09-08 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=67300 Mark Thomas changed: What|Removed |Added Resolution|--- |INVALID Status|NEW

[Bug 67300] HTTP pipelining mistaken for request smuggling

2023-09-08 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=67300 Mark Thomas changed: What|Removed |Added Summary|Suspected HTTP request |HTTP pipelining mistaken

[Bug 66684] SSL HandShake failed when crlFile linked to an empty file

2023-09-08 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66684 Mark Thomas changed: What|Removed |Added Resolution|--- |INVALID Status|REOPENED

[Bug 66684] SSL HandShake failed when crlFile linked to an empty file

2023-09-08 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66684 --- Comment #14 from DigitalCat --- This is client certificates, and we set clientAuth=true, -- You are receiving this mail because: You are the assignee for the bug. - To un

[tomcat] branch main updated: Use consistent method for manager access

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new fd2b06de2c Use consistent method for manager access fd

[tomcat] branch 9.0.x updated: Use consistent method for manager access

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 1351980962 Use consistent method for manager access

[tomcat] branch 8.5.x updated: Use consistent method for manager access

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new d6e8805524 Use consistent method for manager access

[tomcat] branch 10.1.x updated: Use consistent method for manager access

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new 0138881ff2 Use consistent method for manager acces

[GitHub] [tomcat] michael-o commented on a diff in pull request #666: Performance improvements for ImplicitObjectELResolver

2023-09-08 Thread via GitHub
michael-o commented on code in PR #666: URL: https://github.com/apache/tomcat/pull/666#discussion_r1319594183 ## java/javax/servlet/jsp/el/ImplicitObjectELResolver.java: ## @@ -44,31 +44,32 @@ * @since JSP 2.1 */ public class ImplicitObjectELResolver extends ELResolver { +

[tomcat] branch main updated: Use a more consistent parent reference for getResources

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 83c53772cb Use a more consistent parent reference for

[tomcat] branch 10.1.x updated: Use a more consistent parent reference for getResources

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new 28c4c8a3f7 Use a more consistent parent reference

[tomcat] branch 9.0.x updated: Use a more consistent parent reference for getResources

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new cf797fd615 Use a more consistent parent reference fo

[tomcat] branch 8.5.x updated: Use a more consistent parent reference for getResources

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 1e35981336 Use a more consistent parent reference fo

[GitHub] [tomcat] y987425112 opened a new pull request, #667: Before closing the database connection, roll back the transaction

2023-09-08 Thread via GitHub
y987425112 opened a new pull request, #667: URL: https://github.com/apache/tomcat/pull/667 fix bug https://bz.apache.org/bugzilla/show_bug.cgi?id=64570 Before closing the database connection, roll back the transaction -- This is an automated message from the Apache Git Service. To r

[tomcat] branch main updated: Avoid three unlikely NPE

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 5427edbcf9 Avoid three unlikely NPE 5427edbcf9 is desc

[tomcat] branch 10.1.x updated: Avoid three unlikely NPE

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new e48ffb1e05 Avoid three unlikely NPE e48ffb1e05 is

[tomcat] branch 9.0.x updated: Avoid three unlikely NPE

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 51778a37fe Avoid three unlikely NPE 51778a37fe is de

[tomcat] branch 8.5.x updated: Avoid three unlikely NPE

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 39f7fa3158 Avoid three unlikely NPE 39f7fa3158 is de

[GitHub] [tomcat] anuragdy commented on a diff in pull request #666: Performance improvements for ImplicitObjectELResolver

2023-09-08 Thread via GitHub
anuragdy commented on code in PR #666: URL: https://github.com/apache/tomcat/pull/666#discussion_r1319841883 ## java/javax/servlet/jsp/el/ImplicitObjectELResolver.java: ## @@ -44,31 +44,32 @@ * @since JSP 2.1 */ public class ImplicitObjectELResolver extends ELResolver { +

[tomcat] branch main updated: Avoid very unlikely NPE

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 5981c6720c Avoid very unlikely NPE 5981c6720c is descr

[tomcat] branch 10.1.x updated: Avoid very unlikely NPE

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new 9caeac1648 Avoid very unlikely NPE 9caeac1648 is d

[tomcat] branch 9.0.x updated: Avoid very unlikely NPE

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 8db364ff75 Avoid very unlikely NPE 8db364ff75 is des

[tomcat] branch 8.5.x updated: Avoid very unlikely NPE

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 34af21daff Avoid very unlikely NPE 34af21daff is des

[tomcat] branch main updated: Avoid three possible NPEs

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new e98bd36df2 Avoid three possible NPEs e98bd36df2 is des

[tomcat] branch 10.1.x updated: Avoid three possible NPEs

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new 45bd08f34b Avoid three possible NPEs 45bd08f34b is

[tomcat] branch 9.0.x updated: Avoid three possible NPEs

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 4c910ac27a Avoid three possible NPEs 4c910ac27a is d

[tomcat] branch 8.5.x updated: Avoid three possible NPEs

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new bf15939613 Avoid three possible NPEs bf15939613 is d

[tomcat] branch main updated: Fix possible NPE

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 2b37f3cf9c Fix possible NPE 2b37f3cf9c is described be

[tomcat] branch 10.1.x updated: Fix possible NPE

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new 9db637f84a Fix possible NPE 9db637f84a is describe

[tomcat] branch 9.0.x updated: Fix possible NPE

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 6f4f0973c1 Fix possible NPE 6f4f0973c1 is described

[tomcat] branch 8.5.x updated: Fix possible NPE

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new fd8be3739a Fix possible NPE fd8be3739a is described

[tomcat] branch main updated: Fix possible NPE

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new feb77a1584 Fix possible NPE feb77a1584 is described be

[tomcat] branch 10.1.x updated: Fix possible NPE

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new 05c66e64a9 Fix possible NPE 05c66e64a9 is describe

[tomcat] branch 9.0.x updated: Fix possible NPE

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 0d4852e262 Fix possible NPE 0d4852e262 is described

[tomcat] branch 8.5.x updated: Fix possible NPE

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 17905a911c Fix possible NPE 17905a911c is described

Re: [tomcat] branch main updated: Avoid three possible NPEs

2023-09-08 Thread Mark Thomas
On 08/09/2023 14:27, r...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new e98bd36

[Bug 64570] Transaction not rollbacked if autocommit is false

2023-09-08 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64570 --- Comment #1 from Christopher Schultz --- (In reply to Ronald from comment #0) > Created attachment 37344 [details] > Packet capturing using wireshark > > I think I found a bug in the Tomcat JDBC Pool. > > If I start a connection with autoC

[Bug 67235] NPE (NullPointerException) occurs in AsyncContextImpl.decrementInProgressAsyncCount after version 10.1.12.

2023-09-08 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=67235 Mark Thomas changed: What|Removed |Added Status|NEEDINFO|NEW --- Comment #5 from Mark Thomas ---

Potential performance improvement

2023-09-08 Thread Christopher Schultz
All, There are many cases in Tomcat where we change the letter-case of a String value so it's easier to compare when case doesn't matter. In particular, HTTP header names and many spec-defined values are supposed to be case-insensitive and so all comparisons involving them must be done withou

Re: Potential performance improvement

2023-09-08 Thread Christopher Schultz
All, Please ignore the fact that my benchmark is all oriented around toUpperCase instead of toLowerCase :) -chris On 9/8/23 13:25, Christopher Schultz wrote: All, There are many cases in Tomcat where we change the letter-case of a String value so it's easier to compare when case doesn't ma

Re: [tomcat] branch main updated: Avoid three possible NPEs

2023-09-08 Thread Rémy Maucherat
On Fri, Sep 8, 2023 at 6:07 PM Mark Thomas wrote: > > On 08/09/2023 14:27, r...@apache.org wrote: > > This is an automated email from the ASF dual-hosted git repository. > > > > remm pushed a commit to branch main > > in repository https://gitbox.apache.org/repos/asf/tomcat.git > > > > > > The fol

[tomcat] branch main updated: Avoid useless map lookup

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new aa15afefd8 Avoid useless map lookup aa15afefd8 is desc

[tomcat] branch 9.0.x updated: Avoid useless map lookup

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 9eda69e65d Avoid useless map lookup 9eda69e65d is de

[tomcat] branch 10.1.x updated: Avoid useless map lookup

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new 1c325ded24 Avoid useless map lookup 1c325ded24 is

[tomcat] branch 8.5.x updated: Avoid useless map lookup

2023-09-08 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 9b7a4c8c19 Avoid useless map lookup 9b7a4c8c19 is de