You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2005/09/20 21:24:52 UTC
DO NOT REPLY [Bug 36741] New: - ArrayIndexOutOfBoundsException in org.apache.coyote.http11.InternalOutputBuffer.write

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=36741>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=36741

           Summary: ArrayIndexOutOfBoundsException in
                    org.apache.coyote.http11.InternalOutputBuffer.write
           Product: Tomcat 5
           Version: 5.0.28
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P3
         Component: Connector:HTTP
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: greg-apache-bugs@nest.cx


There are possible buffer overflows in InternalOutputBuffer. I am
attaching patches to dynamically flush buf when it is full. 

One way to trigger this exception is to add a header to the response
which will be longer than maxHttpHeaderSize parameter (4K by default).

Here is a typical stack trace:

ArrayIndexOutOfBoundsException: 37522952
at
org.apache.coyote.http11.InternalOutputBuffer.write(InternalOutputBuffer.java(Inline

at
org.apache.coyote.http11.InternalOutputBuffer.sendHeader(InternalOutputBuffer.java(I

at
org.apache.coyote.http11.Http11Processor.prepareResponse(Http11Processor.java(Compil

at org.apache.coyote.http11.Http11Processor.action(Http11Processor.java(Compiled
Code))
at org.apache.coyote.Response.action(Response.java(Inlined Compiled Code))
at org.apache.coyote.Response.sendHeaders(Response.java(Inlined Compiled Code))
at org.apache.coyote.tomcat5.OutputBuffer.doFlush(OutputBuffer.java(Compiled Code))
at org.apache.coyote.tomcat5.OutputBuffer.close(OutputBuffer.java(Compiled Code))
at
org.apache.coyote.tomcat5.CoyoteResponse.finishResponse(CoyoteResponse.java(Compiled

at org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java(Compiled
Code))
at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java(Compiled Code)

at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Ht

at
org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java(Compiled Code)

at
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:683)
at java.lang.Thread.run(Thread.java:568)

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org