Re: Found Denial Of Service (was [S2] App produces lot garbage IMPORTANT NEWS (I HOPE))

2007-07-05 Thread Ing. Andrea Vettori
Hi, the cpu usage is by the garbage collector that's collecting a large amount of garbage !! Il giorno 05/lug/07, alle ore 13:01, Alexis Pigeon ha scritto: I confirm the issue. Just try this on an existing S2 application : - add the field - add the proper getter and setter in the Action

Re: Found Denial Of Service (was [S2] App produces lot garbage IMPORTANT NEWS (I HOPE))

2007-07-05 Thread Antonio Petrelli
2007/7/5, Alexis Pigeon <[EMAIL PROTECTED]>: I'm not familiar enough with JIRA to file an issue right now, but I'll do so later today if I find some time... Instead of creating a new issue, put a comment in this: https://issues.apache.org/struts/browse/WW-2030 Antonio

Re: Found Denial Of Service (was [S2] App produces lot garbage IMPORTANT NEWS (I HOPE))

2007-07-05 Thread Alexis Pigeon
I confirm the issue. Just try this on an existing S2 application : - add the field - add the proper getter and setter in the Action class - launch the app - in the added field, write %{password} -> in my case, the tomcat process is eating 100% of the cpu. no problem with memory consumption, th

Re: Found Denial Of Service (was [S2] App produces lot garbage IMPORTANT NEWS (I HOPE))

2007-07-05 Thread Antonio Petrelli
2007/7/5, Ing. Andrea Vettori <[EMAIL PROTECTED]>: If it's not already addressed it's a very serious bug! I agree. I started a thread in Struts Developers mailing list. If you're willing to participate... :-) http://www.nabble.com/-S2--Heads-Up%3A-possible-DOS-problem-tf4028994.html Antoni

Re: Found Denial Of Service (was [S2] App produces lot garbage IMPORTANT NEWS (I HOPE))

2007-07-05 Thread Ing. Andrea Vettori
Done. https://issues.apache.org/struts/browse/WW-2030 I tried on two different struts application. Maybe others can try on their app ??? If it's not already addressed it's a very serious bug! Il giorno 05/lug/07, alle ore 12:28, Antonio Petrelli ha scritto: 2007/7/5, Ing. Andrea Vettori

Re: Found Denial Of Service (was [S2] App produces lot garbage IMPORTANT NEWS (I HOPE))

2007-07-05 Thread Antonio Petrelli
2007/7/5, Ing. Andrea Vettori <[EMAIL PROTECTED]>: If the password field is named "password" and the password entered value is %{password} than this loop is eating all memory... Don't think it's this to cause my problem BUT it's a potentially BIG DOS problem !!! It work with every s:field I tr

Found Denial Of Service (was [S2] App produces lot garbage IMPORTANT NEWS (I HOPE))

2007-07-05 Thread Ing. Andrea Vettori
If the password field is named "password" and the password entered value is %{password} than this loop is eating all memory... Don't think it's this to cause my problem BUT it's a potentially BIG DOS problem !!! It work with every s:field I tried... Il giorno 05/lug/07, alle ore 01:53, I