[ANNOUNCEMENT] Commons Daemon 1.4.0 Released

2024-05-24 Thread Mark Thomas
The Apache Commons Team is pleased to announce the availability of Apache Commons Daemon 1.4.0 The Apache Commons Daemon software library provides a generic Daemon (unix) or Service (Windows) wrapper for Java code. Version 1.4.0 raises the minimum supported version of Java to Java 8 and

[ANNOUNCEMENT] Commons Daemon 1.3.4 Released

2023-05-12 Thread Mark Thomas
The Apache Commons Team is pleased to announce the availability of Apache Commons Daemon 1.3.4. The Apache Commons Daemon software library provides a generic Daemon (unix) or Service (Windows) wrapper for Java code. Version 1.3.4 is a bugfix release. A full list of changes can be found at

Re: [SECURITY] CVE-2023-24998 Apache Commons FileUpload - DoS with excessive parts

2023-02-20 Thread Mark Thomas
On 20/02/2023 17:01, Olivier Jaquemet wrote: On 20/02/2023 17:52, Mark Thomas wrote: On 20/02/2023 16:40, Olivier Jaquemet wrote: Does it mean that the 1.5 is not secured by default against CVE-2023-24998, and require explicit configuration to be secured ? Correct. Commons FileUpload does

Re: [SECURITY] CVE-2023-24998 Apache Commons FileUpload - DoS with excessive parts

2023-02-20 Thread Mark Thomas
FileUpload is integrated into other products, those products typically provide appropriate defaults for their use of the library. Kind regards, Mark Thanks for your help, Olivier [1] https://commons.apache.org/proper/commons-fileupload/changes-report.html#a1.5 On 20/02/2023 16:55, Mark Thomas w

[SECURITY] CVE-2023-24998 Apache Commons FileUpload - DoS with excessive parts

2023-02-20 Thread Mark Thomas
CVE-2023-24998 Apache Commons FileUpload - DoS with excessive parts Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Commons FileUpload 1.0-beta-1 to 1.4 Description: Apache Commons FileUpload before 1.5 does not limit the number of request parts to be

[ANNOUNCE] Apache Commons FIleUpload 1.5 Released

2023-02-13 Thread Mark Thomas
The Apache Commons Team is pleased to announce the release of Apache Commons FileUpload 1.5. The Commons FileUpload software library makes it easy to add robust, high-performance, file upload capability to your servlets and web applications. Source and binary distributions are available for

[ANNOUNCEMENT] Commons Daemon 1.3.2 Released

2022-10-10 Thread Mark Thomas
The Apache Commons Team is pleased to announce the availability of Apache Commons Daemon 1.3.2. The Apache Commons Daemon software library provides a generic Daemon (unix) or Service (Windows) wrapper for Java code. Version 1.3.2 is a bugfix release. A full list of changes can be found at

Re: [daemon] Procrun and -javaagent

2022-08-19 Thread Mark Thomas
Hi, What version of Commons Daemon? Are you configuring the service via the UI or the command line? Mark On 19/08/2022 13:46, Fernando O. wrote: Hi all,     Disclaimer:  I'm pretty new to windows, I worked most of my life on linux     I'm trying to add a java agent to a windows service,

[ANNOUNCEMENT] Commons Daemon 1.3.1 Released

2022-05-09 Thread Mark Thomas
The Apache Commons Team is pleased to announce the availability of Apache Commons Daemon 1.3.1. The Apache Commons Daemon software library provides a generic Daemon (unix) or Service (Windows) wrapper for Java code. Version 1.3.1 is a mainly bugfix release. A full list of changes can be found

[ANNOUNCEMENT] Commons Daemon 1.3.0 Released

2022-03-15 Thread Mark Thomas
The Apache Commons Team is pleased to announce the availability of Apache Commons Daemon 1.3.0. The Apache Commons Daemon software library provides a generic Daemon (unix) or Service (Windows) wrapper for Java code. Version 1.3.0 is a mainly bugfix release but also increases the minimum Java

Re: [DAEMON] Updating install image on Windows

2021-12-24 Thread Mark Thomas
On 23/12/2021 16:20, Kauppila Jared wrote: Hello, When using 'procrun.exe' to install a service on Windows, you can specify '-Install C:/path/to/procrun.exe' to set the imagePath that the service will utilize. I've noticed that updating a service while passing '-install' will not update

Re: [daemon] Escaping the colon

2021-08-17 Thread Mark Thomas
Please try again with single quotes rather than double quotes. i.e. -Dfoo='bar;zar' Mark On 17/08/2021 07:43, Gridinas, Mantas wrote: I did test that prior writing the message. Result was the following: -Dfoo=bar zar -Original Message- From: Gary Gregory Sent: Monday, August 16,

Re: commons-fileupload dependency and CVE

2021-07-11 Thread Mark Thomas
couldn't remember. It was SourceClear - it looks like it was bought by Veracode. Mark On Fri, Jul 9, 2021 at 11:54 Mark Thomas wrote: On 09/07/2021 15:49, Daniel Wille wrote: That is good to know, and I appreciate that info. I know that making updates to libraries for reasons like

Re: commons-fileupload dependency and CVE

2021-07-09 Thread Mark Thomas
On 09/07/2021 15:49, Daniel Wille wrote: That is good to know, and I appreciate that info. I know that making updates to libraries for reasons like this is frowned upon by developers whose time is better spent fixing actual problems. It does mean however that many users will be in a situation

Re: commons-fileupload dependency and CVE

2021-07-09 Thread Mark Thomas
On 09/07/2021 15:11, Daniel Wille wrote: Hi all, I recently noted that commons-fileupload:commons-fileupload:1.4 has a dependency on commons-io:commons-io:2.2, which has a CVE (CVE-2021-29425). This could be mitigated by simply updating the dependency version to 2.7 or later. Would it be

Re: Security issue in commons-fileup.load version 1.4 .

2021-05-27 Thread Mark Thomas
On 27/05/2021 16:29, Matt Sicker wrote: As the user, you have ultimate control over transitive dependency versions that end up in your application. Using Maven, for example, you can override the commons-fileupload dependency on commons-io to the latest release. I don't think anyone here wants to

Re: [daemon] Windows service not starting JVM mode with -javaagent (JDK11)

2021-02-22 Thread Mark Thomas
On 22/02/2021 08:40, Sebastian Götz wrote: > Okay. > > I got it. It appears that the double quotes are no longer allowed. When > removing them the service starts: See the 1.2.0 changelog and https://issues.apache.org/jira/browse/DAEMON-399 Mark

Re: [daemon] Windows service not starting JVM mode with -javaagent (JDK11)

2021-02-12 Thread Mark Thomas
Please can you be specific about exactly which JVM versions and Procrun versions you tested and which worked and which did not? Thanks, Mark On 12/02/2021 10:38, Sebastian Götz wrote: > Hi all, > > I have an issue when I try upgrading my existing application. > For years I have been using

[ANNOUNCEMENT] Commons Daemon 1.2.4 Released

2021-01-22 Thread Mark Thomas
The Apache Commons Team is pleased to announce the availability of Apache Commons Daemon 1.2.3. The Apache Commons Daemon software library provides a generic Daemon (unix) or Service (Windows) wrapper for Java code. Version 1.2.4 is a bugfix release. A full list of changes can be found at

Re: [daemon] Daemon Logfile Rotation on Windows

2020-11-02 Thread Mark Thomas
On 02/11/2020 12:20, JP wrote: > Hello, > > I am searching for any documentation on Daemon / Procrun Logfile > Rotation. As there is not much in the official documentation, I'd like > to ask you my questions. > > From observation it seems like the Procrun log itself and also StdOutput > and

[ANNOUNCEMENT] Commons Daemon 1.2.3 Released

2020-09-14 Thread Mark Thomas
The Apache Commons Team is pleased to announce the availability of Apache Commons Daemon 1.2.3. The Apache Commons Daemon software library provides a generic Daemon (unix) or Service (Windows) wrapper for Java code. Version 1.2.3 is a bugfix release. A full list of changes can be found at

Re: prunsrv JPMS support?

2020-09-02 Thread Mark Thomas
On 01/09/2020 17:31, Jan Patrick Lübbert wrote: > I tried the JVM mode with the service config (arguments as array in a > PowerShell script): > > "install", > "MyService", > "--DisplayName=""My Service""", > "--JavaHome=""$RootPath\jre""", >

Re: prunsrv JPMS support?

2020-08-31 Thread Mark Thomas
On 31/08/2020 12:38, JP wrote: > Hello, > > Can anyone tell me if prunsrv does support JPMS/modularized applications > on the Windows platform? I read that Jsvc does support it, but I havn't > found anything about prunsrv in the docs so far. > > I tried to modify my configuration, but hat no

Re: [daemon] Procrun UnsatisfiedLinkError with JNI project

2020-05-12 Thread Mark Thomas
On 12/05/2020 15:15, Adam Retter wrote: > Thanks for your response Mark, further comments inline below - > >> It shouldn't. >> >> Maybe a permissions problem? Although running as LocalService is should >> be fine. > > So I am using the `--ServiceUser=LocalSystem` flag - to run under the >

Re: [daemon] Procrun UnsatisfiedLinkError with JNI project

2020-05-12 Thread Mark Thomas
On 12/05/2020 11:40, Adam Retter wrote: > Hi there, > > I have a Java project which is using JNI to load a native library. I > would like to install it as a Windows service. > > To install it I am running: > > prunsrv.exe install FusionDB-Server --DisplayName=FusionDB-Server >

Re: [daemon] Does prunsrv only run under Administrator account?

2020-05-12 Thread Mark Thomas
On 12/05/2020 11:25, Adam Retter wrote: > I am seeing different behaviour when running prunsrv either as an > Administrator or not. I have seen this in the past and it has bothered > me, but I thought it was about time to get to the bottom of it! > > Starting from a clean install of Windows 2012

Re: How to pass the --enable-preview tomcat parameter with JSVC?

2020-03-20 Thread Mark Thomas
On 20/03/2020 13:50, ken edward wrote: > Hello, > > When I deploy my tomcat war it produces the below error message, telling me > to pass the "--enable-preview". I can add the "--enable-preview" to > my non-jsvc dev tomcat start.sh script to resolve the problem fine. > BUT, if I launch the

[ANNOUNCEMENT] Commons Daemon 1.2.2 Released

2019-10-11 Thread Mark Thomas
The Apache Commons Team is pleased to announce the availability of Apache Commons Daemon 1.2.2. The Apache Commons Daemon software library provides a generic Daemon (unix) or Service (Windows) wrapper for Java code. Version 1.2.2 is a bugfix release. A full list of changes can be found at

[ANNOUNCEMENT] Commons Daemon 1.2.1 Released

2019-09-12 Thread Mark Thomas
The Apache Commons Team is pleased to announce the availability of Apache Commons Daemon 1.2.1. The Apache Commons Daemon software library provides a generic Daemon (unix) or Service (Windows) wrapper for Java code. Version 1.2.1 is a bugfix release. A full list of changes can be found at

Re: [daemon] prunsrv x64 1.2.0 doesn't start under local service account

2019-09-02 Thread Mark Thomas
On 02/09/2019 09:00, Adam Retter wrote: > Hi Mark, thanks for your response. I am just wondering when you say: > >> If your application doesn't run under LocalService and you want it to >> then you'll need to fix your application. > > How can we diagnose why Procrun won't start our application

Re: [daemon] prunsrv x64 1.2.0 doesn't start under local service account

2019-09-01 Thread Mark Thomas
On 31/08/2019 14:40, Adam Retter wrote: > I note in the release notes for 1.2.0 it states: > > - The default Windows service user has changed from LocalSystem to > 'NT Authority\LocalService' > > Could this be the problem that I am experiencing? How can I switch > back to LocalSystem? >>>

Re: [daemon] after updating prunsrv to 1.2.0 on Windows - The Service doesn't start

2019-08-30 Thread Mark Thomas
Known issue with 32-bit processes. You can track progress here: https://issues.apache.org/jira/browse/DAEMON-401 Mark On 30/08/2019 15:57, David Gutknecht wrote: > Hello everybody, > > I tried to update the prunsrv.exe (1.0.15) installed on my server > (Windows 2012) to the latest version

Re: [daemon] Enabling Native Memory Tracking while starting tomcat using jsvc

2019-07-30 Thread Mark Thomas
On 30/07/2019 11:18, కృష్ణ చైతన్య wrote: > Hi, > > We are trying to enable Native Memory Tracking by setting the flags > "-XX:+UnlockDiagnosticVMOptions -XX:NativeMemoryTracking=detail > -XX:+PrintNMTStatistics" during startup. We use jsvc to fire up tomcat and > it fails to turn on Native

[ANNOUNCEMENT] Commons Daemon 1.2.0 Released

2019-07-04 Thread Mark Thomas
The Apache Commons Team is pleased to announce the availability of Apache Commons Daemon 1.2.0. The Apache Commons Daemon software library provides a generic Daemon (unix) or Service (Windows) wrapper for Java code. Version 1.2.0 is a feature and bugfix release. A full list of changes can be

Re: [pool] Possible deadlock or user error (me) commons-pool 2.5.0

2018-09-09 Thread Mark Thomas
On 08/09/18 19:36, Mark Thomas wrote: >> For the "- parking to wait for  <0x0006471cd7d8> (a >> java.util.concurrent.locks.ReentrantLock$NonfairSync)" there are 155. >> Though I see no other messages with that object in the thread dump. >> >>

Re: [pool] Possible deadlock or user error (me) commons-pool 2.5.0

2018-09-08 Thread Mark Thomas
On 07/09/18 22:56, Bruce Milner wrote: > Hello, > > I am using commons-pool2-2.5.0 for a MySQL connection pooler. The reason > for not using out-of-the-box is that the existing code relies on > changing catalogs at runtime reusing an existing connection. The > original design was to use multiple

Re: commons-daemon on windows, not honoring JvmMx setting?

2018-04-26 Thread Mark Thomas
On 26/04/18 11:32, Alex O'Ree wrote: > I had it set to 300, task mgr listed it at 800 That looks normal. "Maximum Java Heap Size" != "Maximum OS Memory footprint" Mark > > On Mon, Apr 16, 2018, 9:59 AM Mark Thomas <ma...@apache.org> wrote: > >> On

Re: commons-daemon on windows, not honoring JvmMx setting?

2018-04-16 Thread Mark Thomas
On 16/04/18 14:37, Alex O'Ree wrote: > I've been experimenting with prunsrv and have been able to get my java > process to fire up as a windows service when using the "jvm" mode (couldn't > get java or exe to work). I am noticing that the setting "--JvmMx" does not > seem to be honored. According

Re: [DBCP] troubleshooting pool activity (tomcat version)

2018-03-21 Thread Mark Thomas
On 21/03/18 04:49, Shawn Heisey wrote: > On 3/20/2018 9:49 PM, Phil Steitz wrote: >> First, find out what version of tomcat you are running.  Then look >> in the tomcat build file sources for the properties that define the >> dbcp and pool versions being used.  In TC 7, I am pretty sure the >>

Re: [daemon] - High memory consumption

2018-03-19 Thread Mark Thomas
On 19/03/18 08:32, Kenneth Vindum wrote: > Dear user list > > I'm having a bit of trouble with memory consumption using procsrv.exe. > I've set the --JvmMX=4096 but the .exe process is consuming nearly 7GB of > memory despite the fact that the JVM only consumed the requested 4GM. The >

Re: [POOL] EvictionTimer daemon thread

2018-01-31 Thread Mark Thomas
On 31/01/18 08:15, Bruno P. Kinoshita wrote: > Not sure if it was intentional. > > But here's the reason: > https://github.com/apache/commons-pool/commit/4a20cdca923bd342360f821d7020538e985d9ec2#diff-38e254894b87bdf9a1758778c7ffd50fL167 > > Instead of a `new Timer("", /* isDaemon */ true)`, now

Re: [dbcp] Exposing JMXbeans

2017-12-08 Thread Mark Thomas
ing in jconsole > >   > >   > > Maybe related to the name they use? > >   > > *connectionPool.setJmxName("org.apache.dbcp:DataSource=ECIDB");* > >   > > Walter > >   > >   > > -Original Message- > From: Mark Thomas [mailto:ma...@apache.or

Re: [dbcp] Exposing JMXbeans

2017-12-08 Thread Mark Thomas
> -Original Message- > From: Mark Thomas [mailto:ma...@apache.org] > Sent: 08 December 2017 13:58 > To: user@commons.apache.org > Subject: Re: [dbcp] Exposing JMXbeans > > On 08/12/17 12:47, Walter Heestermans (TME) wrote: >> Hi, >> >> We have Struts application

Re: [dbcp] Exposing JMXbeans

2017-12-08 Thread Mark Thomas
On 08/12/17 12:47, Walter Heestermans (TME) wrote: > Hi, > > We have Struts application using the commons DBCP and commons Pool > implementation. I like to have the pool information exposed as JMX beans, so > that I can use JConsole to look a t the pool behaviour. The application is >

Re: [daemon] Can init() be called more than once in a single JVM session?

2017-11-29 Thread Mark Thomas
On 29/11/17 11:09, Andrea Lo Pumo wrote: > Does anyone have an answer? My expectation is that init() will be call once per JVM but that the jsvc process may create multiple JVMs (sequentially, not concurrently) and that init() will be called for each. If jsvc detects that the JVM has aborted

[ANNOUNCEMENT] Commons Daemon 1.1.0 Released

2017-11-24 Thread Mark Thomas
The Apache Commons Team is pleased to announce the availability of Apache Commons Daemon 1.1.0. The Apache Commons Daemon software library provides a generic Daemon (unix) or Service (Windows) wrapper for Java code. Version 1.1.0 is a maintenance release with a particular focus of providing

Re: [pool] preparePool that only registers key, doesn't create new object

2017-02-09 Thread Mark Thomas
On 06/02/17 10:55, Mark Thomas wrote: On 05/02/17 22:21, Gary Gregory wrote: Anyone care to opine? I think there is a bug in ensureMinIdle. If the objectDeque is null, it needs to obtain a reference to the objectDeque once created in the for loop. Otherwise the call from preparePool

Re: Unsubscribe me from all

2016-09-06 Thread Mark Thomas
Done. Mark On 06/09/2016 12:21, carrie.ctr.w...@faa.gov wrote: > > > -Original Message- > From: Michael Knigge [mailto:michael.kni...@set.de] > Sent: Friday, September 02, 2016 8:57 AM > To: user@commons.apache.org > Subject: commons lang 3.5 - official release? > > Hi, > > is

Re: Prefix for mails to user@commons.apache.org?

2016-08-30 Thread Mark Thomas
On 30/08/2016 16:14, Thomas Brand wrote: > > Hi, > when i receive mail from other lists, they have a subject like > [listname] subject, which makes it easy to quickly sort and overview mails > from multiple lists in one box (i.e. the inbox). It also makes it easier > to quickly filter from spam

Re: [IO] Query on Veracode issue

2016-02-10 Thread Mark Thomas
On 10/02/2016 12:00, Parag Joshi wrote: > Hi, > > > > I am using Apache Commons IO v2.4 (commons-io-2.4.jar) in one of my > projects. My organization uses Veracode to scan the deliveries of my > project. Veracode scans the projects for vulnerability issues and flags the > flaws if the code

Re: [bcel] perspective?

2015-10-06 Thread Mark Thomas
using BCEL to transform Java 8 bytecodes? I believe some the people reporting issues against BCEL are doing exactly that and reporting bugs when they hit issues. Sorry I can't be of more help. Mark > > thanks, > Stephan > > > On 10/04/2015 11:22 PM, Mark Thomas wrote:

Re: [bcel] perspective?

2015-10-04 Thread Mark Thomas
On 04/10/2015 17:56, Stephan Herrmann wrote: > Hence, my primary question: can we realistically expect a release of > BCEL 6.0 any time soon? Define soon. Progress is being made. The more folks that contribute (particularly patches and reviews of proposed patches) the faster that progress will

Re: [POOL2] Pooling mutable objects

2015-02-09 Thread Mark Thomas
On 09/02/2015 18:47, Adrian Crum wrote: I have been reading this thread for days, and I am confused. I might be wrong, but it seems to me the discussion started with a simple problem - an object borrowed from an object pool could not be returned to the pool because the object's hash value

Re: [daemon] Unable to read tomcat.pid file created by Tomcat process

2014-11-11 Thread Mark Thomas
On 11/11/2014 16:47, Gary Gregory wrote: Sorry, I meant what version of Commons Daemon. It is the latest release. 1.0.15. Mark Gary On Tue, Nov 11, 2014 at 11:37 AM, Anil Ambati aamb...@us.ibm.com wrote: I am using Apache Tomcat 7.0.56. I think that is the latest. Regards,

Re: [OT] - Can anyone add me to the Shiro mailing list?

2014-09-10 Thread Mark Thomas
On 10/09/2014 22:33, Konrad Zuse wrote: I tried joining the Shiro mailing list a few weeks ago and I couldn't. I replied to this one exactly the same and got a confirmation. Every time I tried to confirm with the Shiro mailing list, nothing. After I subscribed to this one, I tried it

Re: [OT] - Can anyone add me to the Shiro mailing list?

2014-09-10 Thread Mark Thomas
On 10/09/2014 22:56, Konrad Zuse wrote: Forum? Are you posting to user@shiro.a.o via some mechanism other than e-mailing the list directly? shiro-user.582556.n2.nabble.com is the forum I am referring to, as I said I couldn't get on the mailing list, so this is the next best thing. I

[OT] Re: [fileupload] - Question about uploading additional files other than the ones in the form?

2014-09-08 Thread Mark Thomas
On 08/09/2014 18:06, Dave Newton wrote: On Sun, Sep 7, 2014 at 12:55 PM, Mark Thomas ma...@apache.org wrote: [...] banned from the Tomcat users mailing list [...] Is there official Apache precedence for this? I tried that on the S2 list and it didn't take. Technically, unsub them from

Re: [fileupload] - Question about uploading additional files other than the ones in the form?

2014-09-07 Thread Mark Thomas
On 06/09/2014 20:29, Konrad Zuse wrote: I'm not sure you understood my question correctly, because I have no idea what your answer is supposed to be. Konrad, I think you hit the nail on the head. For background Martin has already got himself banned from the Tomcat users mailing list for

Re: [dbcp] How to create replication aware connection pool ?

2014-08-06 Thread Mark Thomas
On 06/08/2014 01:34, Parth Patil wrote: Hi Friends, I am using DBCP2 in my project and I am pleased with the performance of the library. Though I am only able to provide a single mysql host in the connection string. What do I need to do inorder to make the DBCP connection pool replication

[ANNOUNCEMENT] Apache Commons DBCP 2.0 released

2014-03-04 Thread Mark Thomas
, or suggestions for improvement, see the Apache Commons DBCP website: http://commons.apache.org/proper/commons-dbcp/ Mark Thomas, on behalf of the Apache Commons community - To unsubscribe, e-mail: user-unsubscr...@commons.apache.org

Re: commons-fileupload 1.3.1 maven release

2014-02-19 Thread Mark Thomas
On 19/02/2014 16:07, Zheng, Xiahong wrote: Hi, We are looking to mitigate CVE-2014-0050 provided by 1.3.1. The release can be downloaded but not available in public Maven repo. When will it be pushed to Maven central? It was published to Maven central at the same time it was released -

[ANNOUNCE][SECURITY] Apache Commons FileUpload 1.3.1 released

2014-02-07 Thread Mark Thomas
instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons FileUpload website: http://commons.apache.org/proper/commons-fileupload/ Mark Thomas, on behalf of the Apache Commons community

[SECURITY] CVE-2014-0050 Apache Commons FileUpload and Apache Tomcat DoS

2014-02-06 Thread Mark Thomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 CVE-2014-0050 Apache Commons FileUpload and Apache Tomcat DoS Severity: Important Vendor: The Apache Software Foundation Versions Affected: - - Commons FileUpload 1.0 to 1.3 - - Apache Tomcat 8.0.0-RC1 to 8.0.1 - - Apache Tomcat 7.0.0 to 7.0.50 - -

Re: [fileupload] CVE-2013-2186

2013-11-18 Thread Mark Thomas
On 18/11/2013 17:21, Albrecht Scheidig wrote: Hi there, I have not found any issues in JIRA regarding https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2186 Should not this get fixed in fileupload? No. This vulnerability requires that an application accepts data from a client and then,

[ANNOUNCE] Apache Commons Pool 2.0 released

2013-11-11 Thread Mark Thomas
website: http://commons.apache.org/proper/commons-pool/ Mark Thomas, on behalf of the Apache Commons community - To unsubscribe, e-mail: user-unsubscr...@commons.apache.org For additional commands, e-mail: user-h

Re: [dbcp] memory leak: org.apache.commons.pool.impl.CursorableLinkedList$Listable

2013-10-22 Thread Mark Thomas
On 22/10/2013 09:27, Andrea Bosio wrote: Hello all, I have an application running on Tomcat, with dbcp 1.4, which shows an abnormal memory usage. Heap memory usage grows without releasing. Analyizing an heap dump with Eclipse Memory Analyzer, I find some strange objects instances of

Re: commons pool benchmark issue

2013-09-30 Thread Mark Thomas
On 30/09/2013 03:35, Daniel Wu wrote: Without the pool, it's lightning fast. JProfiler shows most of the time is consumed on locking, thread dump also shows the pool always waits. I tried to timing the pool operations, the results proved the JProfiler reports e,g. with 50 threads, the log

Re: commons pool benchmark issue

2013-09-30 Thread Mark Thomas
On 30/09/2013 08:58, Daniel Wu wrote: Hi Thomas, Thanks a lot. For now, I have to use my own implementation which is 50 times faster than CP but lack of many features from CP. Looking forward to CP 2.x release, and I don't like invent my own wheels. You can get a Pool 2.x snapshot release

Re: Apache Commons Pool performance issue

2013-09-05 Thread Mark Thomas
On 05/09/2013 17:15, Phil Steitz wrote: What version of [pool] are you running? The code stack trace matches up with Pool 1.3 configured with WHEN_EXHAUSTED_BLOCK Hence the behaviour. There are two issues here: - one the configuration isn't doing what you think it is which is a question for a

Re: Apache Commons Pool performance issue

2013-09-05 Thread Mark Thomas
On 05/09/2013 17:58, Programmer wrote: Thanks for the reply guys. I use 1.6 JAR in my classpath. Is there anyway I can verify the 'when exhausted action' at run time? The stack trace reported is definitely not Pool 1.6. It is a perfect match for Pool 1.3. A profiler like YourKit would let

Re: [fileupload] How to prevent file upload ddos ?

2013-08-21 Thread Mark Thomas
On 21/08/2013 20:21, Albert Kam wrote: My assumption here is that file upload will validate the maximum number of files after all files have been received and parsed. And if that's the case, how to avoid hundreds of large file uploads that can bring the system down ? I am currently using

[SECURITY] CVE-2013-0248 Apache Commons FileUpload - Insecure examples

2013-03-06 Thread Mark Thomas
CVE-2013-0248 Apache Commons FileUpload - Insecure examples Severity: Low Vendor: The Apache Software Foundation Versions Affected: - Commons FileUpload 1.0 to 1.2.2 Description: Commons FileUpload provides file upload capability for Servlets and web applications. During the upload process,

Re: commons-daemon.1.0.11 linux binaries

2013-02-01 Thread Mark Thomas
On 31/01/2013 23:23, Suresh Srinivas wrote: Ping. Any comments? Only Windows binaries are provided. You have to build them yourself for all other platforms. Mark On Wed, Jan 30, 2013 at 3:19 PM, Suresh Srinivas sur...@hortonworks.comwrote: In earlier releases (I see it from 1.0.0 to

Re: Licensing questions

2012-09-12 Thread Mark Thomas
On 12/09/2012 21:04, Radel, Ted wrote: We have a business requirement to support SFTP and FTPS transfers. From looking at Commons, it would appear we would need Net, Logging, and VFS components. Is the standard software license for Net, Logging, and VFS free for use in

Re: [dbcp] prepared statement caching when connections are closed but connection pool still has connection

2012-07-27 Thread Mark Thomas
On 25/07/2012 15:01, Amish Shah wrote: Does the DBCP support prepared statement caching in the following condition 1) connection is opened from connection pool 2) Prepared statement are used 3) Connection is closed but returned to connection pool If we reuse the connection from the

Re: unsubscribe failure - 552 spam score (7.2) exceeded threshold

2012-06-27 Thread Mark Thomas
On 27/06/2012 09:49, Brendan Crowley wrote: Hi, I'm trying to unsubscribe to this list, but get the following failure: Hi. This is the qmail-send program at vps--283.cp.blacknight.com. I'm afraid I wasn't able to deliver your message to the following addresses. This is a

Re: [pool] Does borrowObject block?

2012-05-05 Thread Mark Thomas
On 04/05/2012 23:25, Gautam Bakshi wrote: Thanks for the answer Miroslav. This brings up a few other questions to me, mainly can I extend the life of a object in pool(these objects shouldn't be dying if there is work)? Also, can I somehow specify a minimum limit of objects so I can have them

Re: [pool] comparison with other pool library

2012-03-03 Thread Mark Thomas
On 03/03/2012 18:32, Chris Vest wrote: Hey guys, I've written an object pool myself, and make a short comparison between it and commons-pool in my documentation, to help people choose between the two. It's here http://chrisvest.github.com/stormpot/ (under the why choose... headline) and

Re: [pool] Way to destroy all the objects in a pool

2012-01-20 Thread Mark Thomas
On 20/01/2012 20:19, Gary Gregory wrote: On Fri, Jan 20, 2012 at 1:59 PM, Sandeep More moresand...@gmail.com wrote: On Jan 20, 2012, at 12:43 PM, Gary Gregory garydgreg...@gmail.com wrote: On Jan 20, 2012, at 13:29, Sandeep More moresand...@gmail.com wrote: Thanks Gary, Sorry for not

Re: [pool] Approximate release date for commons-pool2 (beta or RC)

2011-12-17 Thread Mark Thomas
On 17/12/2011 15:05, Andreas Maza wrote: Hi, is there any approximate date for a pool2 beta or RC release? No date planned, but we are certainly moving closer at a reasonable rate. If you'd like to see it move faster, please join the dev list and take a look at the remaining open JIRA issues

Re: [daemon] 64 bit daemon for ActiveMQ 5.4

2011-11-03 Thread Mark Thomas
On 03/11/2011 20:58, Moshe Solomon wrote: I'm am trying to run ActiveMQ 5.4 on Intel XEON e7450 2.4 GHz. I get an error The image file ... is valid, but is for machine type other than the current machine. I used the file .\commons-daemon-1.0.7-bin-windows\ia64\prunsrv.exe. My Java version is

Re: [daemon] running class with 32 bit JVM on AMD64 Windows machine

2011-06-23 Thread Mark Thomas
On 23/06/2011 11:50, philip.schw...@thomsonreuters.com wrote: Hi all, I need to use apache daemon to run Java class Foo on a 32-bit JVM that runs on an AMD64 Windows machine. snip/ Running the Win32 version of prunsrv.exe on an AMD64 Windows machine: * Is this one of the intended

Re: [NET] Fwd: [jira] Account username(s)

2011-03-20 Thread Mark Thomas
On 20/03/2011 18:32, Phil Steitz wrote: On 3/20/11 11:13 AM, Steve Cohen wrote: that username exists. The system knows me yet doesn't know me. I would direct this at the administrator of the Jira itself, but I find that I cannot do that without logging on to the system, which I can't do.

Re: [NET] Fwd: [jira] Account username(s)

2011-03-20 Thread Mark Thomas
On 20/03/2011 19:02, Mark Thomas wrote: On 20/03/2011 18:32, Phil Steitz wrote: On 3/20/11 11:13 AM, Steve Cohen wrote: that username exists. The system knows me yet doesn't know me. I would direct this at the administrator of the Jira itself, but I find that I cannot do that without

Re: [daemon] what is the service wrapper replacement for Procrun and Jsvc?

2010-12-14 Thread Mark Thomas
On 13/12/2010 23:20, Trei, Roberta L wrote: I saw in the archives that Jsvc and Procrun are now deprecated. Really? Where? Not to my knowledge. Mark It suggested that a service wrapper class was now being used. Is this class something that is provided within Apache Commons, or is it the

Re: [dbcp] Trying to replace Tomcat 5.5 dbcp with original dbcp

2010-11-26 Thread Mark Thomas
On 26/11/2010 08:59, Hildebrand, Nils, 232 wrote: I did the upgrade to 1.4 (and to commons-pool-1.5.5) - and as you suspeced - the error remains. Is there a short howto how to accomplish the task of exchanging the Tomcat dbcp with a different version? Not that I recall. Plenty of places

Re: [dbcp] Trying to replace Tomcat 5.5 dbcp with original dbcp

2010-11-24 Thread Mark Thomas
On 24/11/2010 16:06, Hildebrand, Nils, 232 wrote: Hi, I am trying to track down a problem propably related to DBCP 1.3. For details see https://issues.apache.org/bugzilla/show_bug.cgi?id=50326 To get further I need to replace dbcp 1.3 - as supplied with Tomcat 5.5.30 or 5.5.31 with the

Re: Buffer Overflow

2010-11-16 Thread Mark Thomas
On 16/11/2010 18:12, Tyson Lowery wrote: I'm seeing this in my catalina.out log file. That suggests that this is an Apache Tomcat question. You want the Apache Tomcat users list. This is the Apache Commons users list. Mark -

Re: DBCP - unclosed connections

2010-11-11 Thread Mark Thomas
On 11/11/2010 05:11, Phil Steitz wrote: I will check or someone else can confirm DBCP and pool versions. http://svn.apache.org/viewvc/tomcat/tc6.0.x/tags/TOMCAT_6_0_26/build.properties.default?view=markup DBCP 1.2.2 Pool 1.5.4 If not the latest you can upgrade them independently of Tomcat and

Re: DBCP - unclosed connections

2010-11-11 Thread Mark Thomas
to follow the instructions below. 6.0.30 will include Pool 1.5.5 Mark On 11/11/2010 12:37 AM, Mark Thomas wrote: On 11/11/2010 05:11, Phil Steitz wrote: I will check or someone else can confirm DBCP and pool versions. http://svn.apache.org/viewvc/tomcat/tc6.0.x/tags/TOMCAT_6_0_26

Re: Static versus Transient Logger Declarations

2010-09-10 Thread Mark Thomas
On 10/09/2010 13:29, Leon Rosenberg wrote: Hello, as to my knowledge the modern containers do not encourage the usage of shared data anymore, and this was the only possible problem cause anyway: The real root cause of this problem is that SHARED data (static members on a class) is being

Re: [GenericObjectPool] problem with numActive counter

2010-01-15 Thread Mark Thomas
, but the counter wasn't correct. Thanks guys for your replies. Byez! Daniele Bonetto Il 15/01/2010 11.08, Mark Thomas ha scritto: On 15/01/2010 10:03, Simone Tripodi wrote: Ciao Daniele ;) First, I suggest you to start the subject line with [componentname], i.e. [POOL

Re: [IO] Problem finding right filepath

2009-11-23 Thread Mark Thomas
Ludwig Magnusson wrote: Hello! We are a team developing a webapp running on a tomcat server. We need to list the files in a certain directory in our application, but we cannot find a way to always get the correct path on the different platforms and environments. Is this solvable through

Re: DBCP deadlock

2009-11-12 Thread Mark Thomas
Marc Logemann wrote: Uh sorry, misread that. Commons-pool is at 1.3. As i said, i am using ivy/maven to resolve that stuff and since i am not explicitely grabbing commons-pool, 1.3 was pushed in because of dependency definition of commons-dhcp 1.2.2 I don't see a deadlock in the thread dump

Re: DBCP deadlock

2009-11-12 Thread Mark Thomas
Marc Logemann wrote: Hi, its a deadlock as also Cyrille pointed out. No, it isn't. There is no exhaustion Yes there is. Look at the source code for the line you quoted: at org.apache.commons.pool.impl.GenericObjectPool.borrowObject(GenericObjectPool.java:810) That is the wait() call in

Re: commons.pool 1.5.2 PoolUtils.synchronizedPool question

2009-09-11 Thread Mark Thomas
Emanuele Gheradini wrote: Watching the source code, it seems to me the implementation of Generic{Keyed}ObjectPool is thread-safe. So what is the need of PoolUtils.synchronizedPool ? Can someone explain me ? I can't find the answer in the docs :( Look at the JavaDocs. Mark

Re: dbcp issue: unable load commons-dbcp.jar and commons-pool.jar in lib/ext

2009-07-29 Thread Mark Thomas
bye webster wrote: I had follow through the guideline from http://tomcat.apache.org/tomcat-5.5-doc/jndi-datasource-examples-howto.html. It is not working, it unable locate the resource in context. The datasource.getConnection was return null. My appBase is mainhost and web application is

Re: DBCP initialSize

2009-07-06 Thread Mark Thomas
CrystalCracker wrote: I am using dbcp with its default settings inside Grails. When the app boots up, I print out the settings as below, which is as per the DBCP docs. maxIdle=8 defaultCatalog=null testOnBorrow=false logwriter=java.io.printwri...@3c4c3922 defaultTransactionIsolation=-1

Re: Connection Pool Tuning

2009-06-30 Thread Mark Thomas
daniel steel wrote: hi all, we are running a load test using tomcat6 with SQL Server and dbcp connection pooling. This is our current conn pool set up - Some of the parameters are not ideal for prod env.. initialSize=5 maxActive=-2 maxIdle=85 maxWait=1

Re: DBCP: Recovering all Connections

2009-06-24 Thread Mark Thomas
Patrick Lightbody wrote: I have a somewhat unique use case: I want to be able to, on command, tell my BasicDataSource to recover any outstanding open Connections. I don't see any methods in the API that indicate there is a way to force that. There are timeouts that will recover it, but is

  1   2   >