https://issues.apache.org/bugzilla/show_bug.cgi?id=50293

           Summary: javax.el.CompositeELResolver synchronization issue
           Product: Tomcat 7
           Version: trunk
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Servlet & JSP API
        AssignedTo: dev@tomcat.apache.org
        ReportedBy: robert_goff...@yahoo.com


Created an attachment (id=26310)
 --> (https://issues.apache.org/bugzilla/attachment.cgi?id=26310)
Synchronize change in CompositeELResolver.add

The javax.el.CompositeELResolver.add method needs to synchronize around the
update to the resolvers.  If two threads call add, then it is possible for both
threads get past the size check, then one thread updates the size, and when the
next thread tries to update the size, it fails with an
ArrayIndexOutOfBoundsException.

Also, it makes sense to increase the default size of the ELResolver array since
even the jasper EL adds 5 ELResolvers.  I propose a default of 8.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to