You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Michenaud Laurent <lm...@free.fr> on 2003/05/31 00:37:49 UTC

What is it ? useURIValidationHack

I can't find any documentation about the parameter useURIValidationHack.

<!-- Define a Coyote/JK2 AJP 1.3 Connector on port 8009 -->
<Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
           port="8009" minProcessors="5" maxProcessors="75"
           enableLookups="true" redirectPort="8443"
           acceptCount="10" debug="2" connectionTimeout="0"
           useURIValidationHack="false"
           protocolHandlerClassName="org.apache.jk.server.JkCoyoteHandler"/>



---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


Re: What is it ? useURIValidationHack

Posted by Bill Barker <wb...@wilshire.com>.
That's pretty much it.  TC 4.0.x didn't handle some traversal attacks well
without this set.  TC 4.1.x should handle it fine without it being set.  The
especially paranoid can set it anyway, and have one more choke-point for
traversal attacks.  I'm including the source for 'validate' so you can see
what it checks for:

    protected static String validate(String path) {

        if (path == null)
            return null;

        // Create a place for the normalized path
        String normalized = path;

        // Normalize "/%7E" and "/%7e" at the beginning to "/~"
        if (normalized.startsWith("/%7E") ||
            normalized.startsWith("/%7e"))
            normalized = "/~" + normalized.substring(4);

        // Prevent encoding '%', '/', '.' and '\', which are special
reserved
        // characters
        if ((normalized.indexOf("%25") >= 0)
            || (normalized.indexOf("%2F") >= 0)
            || (normalized.indexOf("%2E") >= 0)
            || (normalized.indexOf("%5C") >= 0)
            || (normalized.indexOf("%2f") >= 0)
            || (normalized.indexOf("%2e") >= 0)
            || (normalized.indexOf("%5c") >= 0)) {
            return null;
        }

        if (normalized.equals("/."))
            return "/";

        // Normalize the slashes and add leading slash if necessary
        if (normalized.indexOf('\\') >= 0)
            normalized = normalized.replace('\\', '/');
        if (!normalized.startsWith("/"))
            normalized = "/" + normalized;

        // Resolve occurrences of "//" in the normalized path
        while (true) {
            int index = normalized.indexOf("//");
            if (index < 0)
                break;
            normalized = normalized.substring(0, index) +
                normalized.substring(index + 1);
        }

        // Resolve occurrences of "/./" in the normalized path
        while (true) {
            int index = normalized.indexOf("/./");
            if (index < 0)
                break;
            normalized = normalized.substring(0, index) +
                normalized.substring(index + 2);
        }

        // Resolve occurrences of "/../" in the normalized path
        while (true) {
            int index = normalized.indexOf("/../");
            if (index < 0)
                break;
            if (index == 0)
                return (null);  // Trying to go outside our context
            int index2 = normalized.lastIndexOf('/', index - 1);
            normalized = normalized.substring(0, index2) +
                normalized.substring(index + 3);
        }

        // Declare occurrences of "/..." (three or more dots) to be invalid
        // (on some Windows platforms this walks the directory tree!!!)
        if (normalized.indexOf("/...") >= 0)
            return (null);

        // Return the normalized path that we have completed
        return (normalized);

    }

"Jason Bainbridge" <ja...@jblinux.org> wrote in message
news:200305310655.16715.jason@jblinux.org...
> On Sat, 31 May 2003 06:37, Michenaud Laurent wrote:
> > I can't find any documentation about the parameter useURIValidationHack.
>
> // Additional URI normalization and validation is needed for security
>         // reasons on Tomcat 4.0.x
>         if (connector.getUseURIValidationHack()) {
>             String uri = validate(request.getRequestURI());
>             if (uri == null) {
>                 res.setStatus(400);
>                 res.setMessage("Invalid URI");
>                 throw new IOException("Invalid URI");
>             } else {
>                 req.requestURI().setString(uri);
>                 // Redoing the URI decoding
>                 req.decodedURI().duplicate(req.requestURI());
>                 req.getURLDecoder().convert(req.decodedURI(), true);
>             }
>         }
>
> I'm guessing this is because of the ServletInvoker security exploit,
either
> that or another one that was in earlier 4.0 versions, maybe one of the
> development types on the list will be able to shine more light on the
> subject.
>
> Regards,
> --
> Jason Bainbridge
> KDE Web Team - http://kde.org
> webmaster@kde.org




---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


RE: Startup Errors & Apache crash

Posted by Allen Williams <an...@csunv.com>.
I have downloaded the jk2 source, and have looked for the following errors.

[Fri May 30 21:47:26 2003] [error] mod_jk child init 1 0
[Fri May 30 21:47:26 2003] [notice] Child 729: Acquired the start mutex.
[Fri May 30 21:47:26 2003] [notice] Child 729: Starting 25 worker threads.
[Fri May 30 21:47:40 2003] [notice] Parent: child process exited with status
3221225477 -- Restarting.

The first one I can find, and appears to be innocuous.  I cannot find the
other two, and so am assuming they must come from Apache.

Are there any developers monitoring this board that might be able to help
here?  Where would jk2 be exiting from?  I know there must be simple
configuration problem here.

TIA,
------------------------------
Allen



> -----Original Message-----
> From: Allen Williams [mailto:anw@csunv.com]
> Sent: Friday, May 30, 2003 9:24 PM
> To: Tomcat Users List
> Subject: RE: Startup Errors & Apache crash
>
>
> Yeah, Apache is starting, and generating the error.log (which is where I'm
> getting the messages itemized below).  But, I then get a memrory access
> exception from WinNT.  Where are your config files?  At this
> point, I'll try
> anything!
>
> I'm also getting this right after the first error (Note that this is where
> the child process exits):
>
> [Fri May 30 20:49:07 2003] [error] mod_jk child init 1 0
> [Fri May 30 20:49:07 2003] [notice] Child 538: Acquired the start mutex.
> [Fri May 30 20:49:07 2003] [notice] Child 538: Starting 250
> worker threads.
> [Fri May 30 20:50:00 2003] [notice] Parent: child process exited
> with status
> 3221225477 -- Restarting.
> [Fri May 30 20:50:00 2003] [notice] Parent: Created child process 736
> [Fri May 30 20:50:00 2003] [notice] Child 736: Child process is running
>
>
> It is right after the "Starting 250 worker threads" message that the WinNT
> dialogue pops up.
>
> TIA,
> ------------------------------
> Allen
>
>
>
> > -----Original Message-----
> > From: Jason Bainbridge [mailto:jason@jblinux.org]
> > Sent: Friday, May 30, 2003 8:41 PM
> > To: Tomcat Users List
> > Subject: Re: Startup Errors & Apache crash
> >
> >
> > Okay last try before hitting the hay...
> >
> > Have you got the following line in your jk2.properties as well?
> >
> > shm.file=g:/ApacheGroup/Apache2/logs/jk2.shm
> >
> > Maybe try using my config files and just changing the paths. :)
> >
> > Also have a look to see if it gets as far as generating any
> > Tomcat logs, it
> > could be something silly like a port conflict. I'm assuming Apache still
> > ins't starting at all? Otherwise I'd let it start for about 2
> minutes and
> > then try to access http://localhost/examples/
> >
> > Good luck!
> >
> > J.
> >
> > On Sat, 31 May 2003 08:26, Allen Williams wrote:
> > > Maybe this has something to do with it (shows up after this
> > first error):
> > >
> > > [Fri May 30 19:20:02 2003] [error] mod_jk child init 1 0
> > > [Fri May 30 19:20:02 2003] [notice] Child 517: Acquired the
> start mutex.
> > > [Fri May 30 19:20:02 2003] [notice] Child 517: Starting 250
> > worker threads.
> > > [Fri May 30 19:20:20 2003] [notice] Parent: child process exited with
> > > status 3221225477 -- Restarting.
> > > [Fri May 30 19:20:20 2003] [notice] Parent: Created child process 763
> > > [Fri May 30 19:20:20 2003] [notice] Child 763: Child process
> is running
> > >
> > > TIA,
> > > ------------------------------
> > > Allen
> > >
> > > > -----Original Message-----
> > > > From: Jason Bainbridge [mailto:jason@jblinux.org]
> > > > Sent: Friday, May 30, 2003 8:13 PM
> > > > To: Tomcat Users List
> > > > Subject: Re: Startup Errors & Apache crash
> > > >
> > > > On Sat, 31 May 2003 08:10, Allen Williams wrote:
> > > > > I have this in my jk2.properties:
> > > > >
> > > > > shm.file=g:/ApacheGroup/Apache2/logs/jk2.shm
> > > > >
> > > > > and it exists.
> > > >
> > > > Hmmm starting to get beyond my realm of expertise... Stab in the
> > > > dark... You
> > > > haven't got Tomcat already running do you? It shouldn't be...
> > > >
> > > > Also try upping all your debug levels in workers2.properties to
> > > > 10 and see if
> > > > any better errors get spat out.
> > > >
> > > > --
> > > > Jason Bainbridge
> > > > KDE Web Team - http://kde.org
> > > > webmaster@kde.org
> > > >
> > > >
> ---------------------------------------------------------------------
> > > > To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> > > > For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
> > >
> > > ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> > > For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
> >
> > --
> > Jason Bainbridge
> > KDE Web Team - http://kde.org
> > webmaster@kde.org
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> > For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


RE: Startup Errors & Apache crash

Posted by Allen Williams <an...@csunv.com>.
Yeah, Apache is starting, and generating the error.log (which is where I'm
getting the messages itemized below).  But, I then get a memrory access
exception from WinNT.  Where are your config files?  At this point, I'll try
anything!

I'm also getting this right after the first error (Note that this is where
the child process exits):

[Fri May 30 20:49:07 2003] [error] mod_jk child init 1 0
[Fri May 30 20:49:07 2003] [notice] Child 538: Acquired the start mutex.
[Fri May 30 20:49:07 2003] [notice] Child 538: Starting 250 worker threads.
[Fri May 30 20:50:00 2003] [notice] Parent: child process exited with status
3221225477 -- Restarting.
[Fri May 30 20:50:00 2003] [notice] Parent: Created child process 736
[Fri May 30 20:50:00 2003] [notice] Child 736: Child process is running


It is right after the "Starting 250 worker threads" message that the WinNT
dialogue pops up.

TIA,
------------------------------
Allen



> -----Original Message-----
> From: Jason Bainbridge [mailto:jason@jblinux.org]
> Sent: Friday, May 30, 2003 8:41 PM
> To: Tomcat Users List
> Subject: Re: Startup Errors & Apache crash
>
>
> Okay last try before hitting the hay...
>
> Have you got the following line in your jk2.properties as well?
>
> shm.file=g:/ApacheGroup/Apache2/logs/jk2.shm
>
> Maybe try using my config files and just changing the paths. :)
>
> Also have a look to see if it gets as far as generating any
> Tomcat logs, it
> could be something silly like a port conflict. I'm assuming Apache still
> ins't starting at all? Otherwise I'd let it start for about 2 minutes and
> then try to access http://localhost/examples/
>
> Good luck!
>
> J.
>
> On Sat, 31 May 2003 08:26, Allen Williams wrote:
> > Maybe this has something to do with it (shows up after this
> first error):
> >
> > [Fri May 30 19:20:02 2003] [error] mod_jk child init 1 0
> > [Fri May 30 19:20:02 2003] [notice] Child 517: Acquired the start mutex.
> > [Fri May 30 19:20:02 2003] [notice] Child 517: Starting 250
> worker threads.
> > [Fri May 30 19:20:20 2003] [notice] Parent: child process exited with
> > status 3221225477 -- Restarting.
> > [Fri May 30 19:20:20 2003] [notice] Parent: Created child process 763
> > [Fri May 30 19:20:20 2003] [notice] Child 763: Child process is running
> >
> > TIA,
> > ------------------------------
> > Allen
> >
> > > -----Original Message-----
> > > From: Jason Bainbridge [mailto:jason@jblinux.org]
> > > Sent: Friday, May 30, 2003 8:13 PM
> > > To: Tomcat Users List
> > > Subject: Re: Startup Errors & Apache crash
> > >
> > > On Sat, 31 May 2003 08:10, Allen Williams wrote:
> > > > I have this in my jk2.properties:
> > > >
> > > > shm.file=g:/ApacheGroup/Apache2/logs/jk2.shm
> > > >
> > > > and it exists.
> > >
> > > Hmmm starting to get beyond my realm of expertise... Stab in the
> > > dark... You
> > > haven't got Tomcat already running do you? It shouldn't be...
> > >
> > > Also try upping all your debug levels in workers2.properties to
> > > 10 and see if
> > > any better errors get spat out.
> > >
> > > --
> > > Jason Bainbridge
> > > KDE Web Team - http://kde.org
> > > webmaster@kde.org
> > >
> > > ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> > > For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> > For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>
> --
> Jason Bainbridge
> KDE Web Team - http://kde.org
> webmaster@kde.org
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


Re: Startup Errors & Apache crash

Posted by Jason Bainbridge <ja...@jblinux.org>.
Okay last try before hitting the hay...

Have you got the following line in your jk2.properties as well?

shm.file=g:/ApacheGroup/Apache2/logs/jk2.shm

Maybe try using my config files and just changing the paths. :)

Also have a look to see if it gets as far as generating any Tomcat logs, it 
could be something silly like a port conflict. I'm assuming Apache still 
ins't starting at all? Otherwise I'd let it start for about 2 minutes and 
then try to access http://localhost/examples/

Good luck!

J.

On Sat, 31 May 2003 08:26, Allen Williams wrote:
> Maybe this has something to do with it (shows up after this first error):
>
> [Fri May 30 19:20:02 2003] [error] mod_jk child init 1 0
> [Fri May 30 19:20:02 2003] [notice] Child 517: Acquired the start mutex.
> [Fri May 30 19:20:02 2003] [notice] Child 517: Starting 250 worker threads.
> [Fri May 30 19:20:20 2003] [notice] Parent: child process exited with
> status 3221225477 -- Restarting.
> [Fri May 30 19:20:20 2003] [notice] Parent: Created child process 763
> [Fri May 30 19:20:20 2003] [notice] Child 763: Child process is running
>
> TIA,
> ------------------------------
> Allen
>
> > -----Original Message-----
> > From: Jason Bainbridge [mailto:jason@jblinux.org]
> > Sent: Friday, May 30, 2003 8:13 PM
> > To: Tomcat Users List
> > Subject: Re: Startup Errors & Apache crash
> >
> > On Sat, 31 May 2003 08:10, Allen Williams wrote:
> > > I have this in my jk2.properties:
> > >
> > > shm.file=g:/ApacheGroup/Apache2/logs/jk2.shm
> > >
> > > and it exists.
> >
> > Hmmm starting to get beyond my realm of expertise... Stab in the
> > dark... You
> > haven't got Tomcat already running do you? It shouldn't be...
> >
> > Also try upping all your debug levels in workers2.properties to
> > 10 and see if
> > any better errors get spat out.
> >
> > --
> > Jason Bainbridge
> > KDE Web Team - http://kde.org
> > webmaster@kde.org
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> > For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org

-- 
Jason Bainbridge
KDE Web Team - http://kde.org 
webmaster@kde.org 

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


RE: Startup Errors & Apache crash

Posted by Allen Williams <an...@csunv.com>.
Maybe this has something to do with it (shows up after this first error):

[Fri May 30 19:20:02 2003] [error] mod_jk child init 1 0
[Fri May 30 19:20:02 2003] [notice] Child 517: Acquired the start mutex.
[Fri May 30 19:20:02 2003] [notice] Child 517: Starting 250 worker threads.
[Fri May 30 19:20:20 2003] [notice] Parent: child process exited with status
3221225477 -- Restarting.
[Fri May 30 19:20:20 2003] [notice] Parent: Created child process 763
[Fri May 30 19:20:20 2003] [notice] Child 763: Child process is running

TIA,
------------------------------
Allen



> -----Original Message-----
> From: Jason Bainbridge [mailto:jason@jblinux.org]
> Sent: Friday, May 30, 2003 8:13 PM
> To: Tomcat Users List
> Subject: Re: Startup Errors & Apache crash
>
>
> On Sat, 31 May 2003 08:10, Allen Williams wrote:
> > I have this in my jk2.properties:
> >
> > shm.file=g:/ApacheGroup/Apache2/logs/jk2.shm
> >
> > and it exists.
> >
>
> Hmmm starting to get beyond my realm of expertise... Stab in the
> dark... You
> haven't got Tomcat already running do you? It shouldn't be...
>
> Also try upping all your debug levels in workers2.properties to
> 10 and see if
> any better errors get spat out.
>
> --
> Jason Bainbridge
> KDE Web Team - http://kde.org
> webmaster@kde.org
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


Re: Startup Errors & Apache crash

Posted by Jason Bainbridge <ja...@jblinux.org>.
On Sat, 31 May 2003 08:10, Allen Williams wrote:
> I have this in my jk2.properties:
>
> shm.file=g:/ApacheGroup/Apache2/logs/jk2.shm
>
> and it exists.
>

Hmmm starting to get beyond my realm of expertise... Stab in the dark... You 
haven't got Tomcat already running do you? It shouldn't be...

Also try upping all your debug levels in workers2.properties to 10 and see if 
any better errors get spat out.

-- 
Jason Bainbridge
KDE Web Team - http://kde.org 
webmaster@kde.org 

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


RE: Startup Errors & Apache crash

Posted by Allen Williams <an...@csunv.com>.
I have this in my jk2.properties:

shm.file=g:/ApacheGroup/Apache2/logs/jk2.shm

and it exists.

TIA,
------------------------------
Allen Williams



> -----Original Message-----
> From: Jason Bainbridge [mailto:jason@jblinux.org]
> Sent: Friday, May 30, 2003 7:51 PM
> To: Tomcat Users List
> Subject: Re: Startup Errors & Apache crash
>
>
> Does this file file=${serverRoot}/logs/jk2.shm exist? Create a
> blank one for
> it if it doesn't and also maybe try referencing the path and not use the
> server variable.
>
> J.
>
> On Sat, 31 May 2003 07:33, Allen Williams wrote:
> > Here I am again:
> >
> > Apache 2, Tomcat 4, WinNT
> >
> > Upon startup, I get a dialog box saying "Apache.exe-
> Application Error: The
> > instruction at 0x00001 referenced memory at 0x00...01. The
> memory could not
> > be read...blah, blah blah".
> >
> > I get this several times (multiple threads?).
> >
> > In the error log I have the following:
> >
> > <Bunch of notices>
> > ...
> >
> > [Fri May 30 19:20:02 2003] [notice] workerEnv.init() ok
> > E:/ApacheGroup/Apache2/conf/workers2.properties
> > [Fri May 30 19:20:02 2003] [error] mod_jk child init 1 0
> > [Fri May 30 19:20:02 2003] [notice] Child 517: Acquired the start mutex.
> >
> > <Bunch more notices>
> >
> > [Fri May 30 19:20:21 2003] [notice] workerEnv.init() ok
> > E:/ApacheGroup/Apache2/conf/workers2.properties
> > [Fri May 30 19:20:21 2003] [error] mod_jk child init 1 0
> > [Fri May 30 19:20:21 2003] [notice] Child 763: Acquired the start mutex.
> >
> > <bunch more notices>
> >
> > (Notice *two* errors here)
> > [Fri May 30 19:20:27 2003] [notice] workerEnv.init() ok
> > E:/ApacheGroup/Apache2/conf/workers2.properties
> > [Fri May 30 19:20:27 2003] [error] mod_jk child init 1 0
> > [Fri May 30 19:20:27 2003] [error] mod_jk child workerEnv in
> error state 1
> > [Fri May 30 19:20:27 2003] [notice] Child 753: Acquired the start mutex.
> >
> > <Bunch more notices>
> >
> > [Fri May 30 19:20:30 2003] [notice] workerEnv.init() ok
> > E:/ApacheGroup/Apache2/conf/workers2.properties
> > [Fri May 30 19:20:30 2003] [error] mod_jk child init 1 0
> > [Fri May 30 19:20:30 2003] [error] mod_jk child workerEnv in
> error state 2
> > [Fri May 30 19:20:30 2003] [notice] Child 747: Acquired the start mutex.
> >
> > And so on, with the "error state" (whatever that is) incrementing.
> >
> > Any help or insight?
> >
> > TIA,
> > Allen
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> > For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>
> --
> Jason Bainbridge
> KDE Web Team - http://kde.org
> webmaster@kde.org
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


Re: Startup Errors & Apache crash

Posted by Jason Bainbridge <ja...@jblinux.org>.
Does this file file=${serverRoot}/logs/jk2.shm exist? Create a blank one for 
it if it doesn't and also maybe try referencing the path and not use the 
server variable.

J.

On Sat, 31 May 2003 07:33, Allen Williams wrote:
> Here I am again:
>
> Apache 2, Tomcat 4, WinNT
>
> Upon startup, I get a dialog box saying "Apache.exe- Application Error: The
> instruction at 0x00001 referenced memory at 0x00...01. The memory could not
> be read...blah, blah blah".
>
> I get this several times (multiple threads?).
>
> In the error log I have the following:
>
> <Bunch of notices>
> ...
>
> [Fri May 30 19:20:02 2003] [notice] workerEnv.init() ok
> E:/ApacheGroup/Apache2/conf/workers2.properties
> [Fri May 30 19:20:02 2003] [error] mod_jk child init 1 0
> [Fri May 30 19:20:02 2003] [notice] Child 517: Acquired the start mutex.
>
> <Bunch more notices>
>
> [Fri May 30 19:20:21 2003] [notice] workerEnv.init() ok
> E:/ApacheGroup/Apache2/conf/workers2.properties
> [Fri May 30 19:20:21 2003] [error] mod_jk child init 1 0
> [Fri May 30 19:20:21 2003] [notice] Child 763: Acquired the start mutex.
>
> <bunch more notices>
>
> (Notice *two* errors here)
> [Fri May 30 19:20:27 2003] [notice] workerEnv.init() ok
> E:/ApacheGroup/Apache2/conf/workers2.properties
> [Fri May 30 19:20:27 2003] [error] mod_jk child init 1 0
> [Fri May 30 19:20:27 2003] [error] mod_jk child workerEnv in error state 1
> [Fri May 30 19:20:27 2003] [notice] Child 753: Acquired the start mutex.
>
> <Bunch more notices>
>
> [Fri May 30 19:20:30 2003] [notice] workerEnv.init() ok
> E:/ApacheGroup/Apache2/conf/workers2.properties
> [Fri May 30 19:20:30 2003] [error] mod_jk child init 1 0
> [Fri May 30 19:20:30 2003] [error] mod_jk child workerEnv in error state 2
> [Fri May 30 19:20:30 2003] [notice] Child 747: Acquired the start mutex.
>
> And so on, with the "error state" (whatever that is) incrementing.
>
> Any help or insight?
>
> TIA,
> Allen
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org

-- 
Jason Bainbridge
KDE Web Team - http://kde.org 
webmaster@kde.org 

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


Startup Errors & Apache crash

Posted by Allen Williams <an...@csunv.com>.
Here I am again:

Apache 2, Tomcat 4, WinNT

Upon startup, I get a dialog box saying "Apache.exe- Application Error: The
instruction at 0x00001 referenced memory at 0x00...01. The memory could not
be read...blah, blah blah".

I get this several times (multiple threads?).

In the error log I have the following:

<Bunch of notices>
...

[Fri May 30 19:20:02 2003] [notice] workerEnv.init() ok
E:/ApacheGroup/Apache2/conf/workers2.properties
[Fri May 30 19:20:02 2003] [error] mod_jk child init 1 0
[Fri May 30 19:20:02 2003] [notice] Child 517: Acquired the start mutex.

<Bunch more notices>

[Fri May 30 19:20:21 2003] [notice] workerEnv.init() ok
E:/ApacheGroup/Apache2/conf/workers2.properties
[Fri May 30 19:20:21 2003] [error] mod_jk child init 1 0
[Fri May 30 19:20:21 2003] [notice] Child 763: Acquired the start mutex.

<bunch more notices>

(Notice *two* errors here)
[Fri May 30 19:20:27 2003] [notice] workerEnv.init() ok
E:/ApacheGroup/Apache2/conf/workers2.properties
[Fri May 30 19:20:27 2003] [error] mod_jk child init 1 0
[Fri May 30 19:20:27 2003] [error] mod_jk child workerEnv in error state 1
[Fri May 30 19:20:27 2003] [notice] Child 753: Acquired the start mutex.

<Bunch more notices>

[Fri May 30 19:20:30 2003] [notice] workerEnv.init() ok
E:/ApacheGroup/Apache2/conf/workers2.properties
[Fri May 30 19:20:30 2003] [error] mod_jk child init 1 0
[Fri May 30 19:20:30 2003] [error] mod_jk child workerEnv in error state 2
[Fri May 30 19:20:30 2003] [notice] Child 747: Acquired the start mutex.

And so on, with the "error state" (whatever that is) incrementing.

Any help or insight?

TIA,
Allen


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


Re: Compilation errors of Servlet.

Posted by Jonathan Michael Nowacki <jn...@indiana.edu>.
I have the full version of tomcat
tomcat4-webapps-4.1.24-full.2jpp
tomcat4-4.1.24-full.2jpp
tomcat4-admin-webapps-4.1.24-full.2jpp
are installed

My variables

JAVA_HOME=/usr/java/j2sdk1.4.1_02
CATALINA_HOME=/var/tomcat4

I've used - none work
CLASSPATH=/usr/java/j2sdk1.4.1_02/lib/
CLASSPATH=/var/tomcat4/common/lib/servlet.jar
CLASSPATH=/var/tomcat4/common/lib/



On Sat, 31 May 2003, Jason Bainbridge wrote:

> On Sat, 31 May 2003 07:03, Jonathan Michael Nowacki wrote:
> > When trying to compile a servlet that works on another installation of
> > tomcat I get this error.
> 
> Taking a guess here...
> 
> Is CATALINA_HOME\common\lib\servlet.jar in your classpath?
> 
> Have you got the LE lite version of Tomcat or the full one? I don't think the 
> LE version would cause such an error though, but the full version is 
> definitely recommended.
> 
> Regards,
> -- 
> Jason Bainbridge
> KDE Web Team - http://kde.org 
> webmaster@kde.org 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
> 
> 
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


Re: Compilation errors of Servlet.

Posted by Jason Bainbridge <ja...@jblinux.org>.
On Sat, 31 May 2003 07:03, Jonathan Michael Nowacki wrote:
> When trying to compile a servlet that works on another installation of
> tomcat I get this error.

Taking a guess here...

Is CATALINA_HOME\common\lib\servlet.jar in your classpath?

Have you got the LE lite version of Tomcat or the full one? I don't think the 
LE version would cause such an error though, but the full version is 
definitely recommended.

Regards,
-- 
Jason Bainbridge
KDE Web Team - http://kde.org 
webmaster@kde.org 

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


Compilation errors of Servlet.

Posted by Jonathan Michael Nowacki <jn...@indiana.edu>.
When trying to compile a servlet that works on another installation of
tomcat I get this error.


----------------------------------------------------------------------------
javac MultiServlet.java 
MultiServlet.java:1: package javax.servlet does not exist
import javax.servlet.*;
^
MultiServlet.java:2: package javax.servlet.http does not exist
import javax.servlet.http.*;
^
MultiServlet.java:7: cannot resolve symbol
symbol  : class HttpServlet 
location: class MultiServlet
public class MultiServlet extends HttpServlet {
                                  ^
MultiServlet.java:12: cannot resolve symbol
symbol  : class ServletConfig 
location: class MultiServlet
  public void init(ServletConfig config) throws ServletException {
                   ^
MultiServlet.java:12: cannot resolve symbol
symbol  : class ServletException 
location: class MultiServlet
  public void init(ServletConfig config) throws ServletException {
                                                ^
MultiServlet.java:23: cannot resolve symbol
symbol  : class HttpServletRequest 
location: class MultiServlet
  public void doPost(HttpServletRequest request, HttpServletResponse
response)
----------------------------------------------------------------------------

The servlet is good, so it can't be the code itself.  Somebody told me I
need some jar files that are in the enterprise edition of java SDK.
so when I try to install it i get:

----------------------------------------------------------------------------


$ ./j2sdkee-1_4-beta-linux.sh 
Using /var/tmp as temporary directory...
Searching for Java(TM) 2 Platform, Standard Edition...
Initializing InstallShield Wizard...
ERROR: could not initialize interface awt - exception:
java.lang.InternalError: Can't connect to X11 window server using ':0.0'
as the value of the DISPLAY variable.

----------------------------------------------------------------------------

What's the deal, and do I really need the enterprise edition?



---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


Re: What is it ? useURIValidationHack

Posted by Jason Bainbridge <ja...@jblinux.org>.
On Sat, 31 May 2003 06:37, Michenaud Laurent wrote:
> I can't find any documentation about the parameter useURIValidationHack.

// Additional URI normalization and validation is needed for security 
        // reasons on Tomcat 4.0.x
        if (connector.getUseURIValidationHack()) {
            String uri = validate(request.getRequestURI());
            if (uri == null) {
                res.setStatus(400);
                res.setMessage("Invalid URI");
                throw new IOException("Invalid URI");
            } else {
                req.requestURI().setString(uri);
                // Redoing the URI decoding
                req.decodedURI().duplicate(req.requestURI());
                req.getURLDecoder().convert(req.decodedURI(), true);
            }
        }

I'm guessing this is because of the ServletInvoker security exploit, either 
that or another one that was in earlier 4.0 versions, maybe one of the 
development types on the list will be able to shine more light on the 
subject.

Regards,
-- 
Jason Bainbridge
KDE Web Team - http://kde.org 
webmaster@kde.org 

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org