You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Stephan Schwab <sc...@dinx.net> on 2002/12/18 01:39:19 UTC

Strange behaviour of Tomcat like a buffer overflow

Hi!

My application hehaves very strange in an unpredicable way. In both
apache and tomcat logfiles I see requests that seem to arrive in a
random order. The Tomcat logfile even shows HTML output of my servlets.
At times in the apache access log the request with HTTP GET parameters
is shown correct, but in tomcats access log the request is logged
altered with some garbage behind the "?".

My system config:

httpd-2.0.40.tar.gz
jakarta-tomcat-4.1.17.tar.gz
j2sdk-1_4_1_01-fcs-linux-i586.rpm

Here are a few lines from the Tomcat access log:

192.168.1.254 - - [18/Dec/2002:01:09:10 1000] "POST
/avsSignon/servlet/signonMember HTTP/1.1" 200 -
r report</tit - - [18/Dec/2002:01:09:11 1000] "GET
/avsSignon/member/clubFront.jsp HTTP/1.1" 302 -
ster Club</TI - - [18/Dec/2002:01:09:11 1000] "GET
/avsSignon/member/clubFront-en.jsp HTTP/1.1" 200 -
192.168.1.254 - - [18/Dec/2002:01:09:11 1000] "GET /avsSignon/signon.css
HTTP/1.1" 304 -
192.168.1.254 - - [18/Dec/2002:01:09:12 1000] "POST
/avsSignon/servlet/signonMember?ily to a new locatio HTTP/1.1" 302 -
ountry</TITLE - - [18/Dec/2002:01:09:12 1000] "GET
/avsSignon/member/usrCountry-en.jsp HTTP/1.1" 200 -
192.168.1.254 - - [18/Dec/2002:01:09:12 1000] "GET /avsSignon/signon.css
HTTP/1.1" 304 -
r report</tit - - [18/Dec/2002:01:09:14 1000] "POST
/avsSignon/servlet/signonMember HTTP/1.1" 302 -
ype of paymen - - [18/Dec/2002:01:09:14 1000] "GET
/avsSignon/member/usrPayment-en.jsp HTTP/1.1" 200 -
192.168.1.254 - - [18/Dec/2002:01:09:14 1000] "GET /avsSignon/signon.css
HTTP/1.1" 304 -
192.168.1.254 - - [18/Dec/2002:01:09:14 1000] "GET
/avsSignon/images/YikesterLogo.gif HTTP/1.1" 304 -
192.168.1.254 - - [18/Dec/2002:01:09:14 1000] "GET
/avsSignon/images/visa.gif HTTP/1.1" 304 -
192.168.1.254 - - [18/Dec/2002:01:09:14 1000] "GET
/avsSignon/images/mastercard.gif HTTP/1.1" 304 -
r report</tit - - [18/Dec/2002:01:09:15 1000] "POST
/avsSignon/servlet/signonMember HTTP/1.1" 302 -
ent by credit - - [18/Dec/2002:01:09:15 1000] "GET
/avsSignon/member/usrCreditCard-en.jsp HTTP/1.1" 200 -
192.168.1.254 - - [18/Dec/2002:01:09:15 1000] "GET /avsSignon/signon.css
HTTP/1.1" 304 -
192.168.1.254 - - [18/Dec/2002:01:09:15 1000] "GET
/avsSignon/images/YikesterLogo.gif HTTP/1.1" 304 -
192.168.1.254 - - [18/Dec/2002:01:09:15 1000] "GET
/avsSignon/images/visa.gif HTTP/1.1" 304 -
192.168.1.254 - - [18/Dec/2002:01:09:15 1000] "GET
/avsSignon/images/mastercard.gif HTTP/1.1" 304 -
192.168.1.254 - - [18/Dec/2002:01:09:16 1000] "POST
/avsSignon/servlet/signonMember HTTP/1.1" 200 -
r report</tit - - [18/Dec/2002:01:09:18 1000] "GET
/avsSignon/member/clubFront.jsp HTTP/1.1" 302 -
ster Club</TI - - [18/Dec/2002:01:09:18 1000] "GET
/avsSignon/member/clubFront-en.jsp HTTP/1.1" 200 -
192.168.1.254 - - [18/Dec/2002:01:09:18 1000] "GET /avsSignon/signon.css
HTTP/1.1" 304 -
192.168.1.254 - - [18/Dec/2002:01:09:19 1000] "POST
/avsSignon/servlet/signonMember?ily to a new locatio HTTP/1.1" 302 -
ountry</TITLE - - [18/Dec/2002:01:09:19 1000] "GET
/avsSignon/member/usrCountry-en.jsp HTTP/1.1" 200 -
192.168.1.254 - - [18/Dec/2002:01:09:19 1000] "GET /avsSignon/signon.css
HTTP/1.1" 304 -
r report</tit - - [18/Dec/2002:01:09:19 1000] "POST
/avsSignon/servlet/signonMember HTTP/1.1" 302 -
ype of paymen - - [18/Dec/2002:01:09:19 1000] "GET
/avsSignon/member/usrPayment-en.jsp HTTP/1.1" 200 -
192.168.1.254 - - [18/Dec/2002:01:09:20 1000] "GET /avsSignon/signon.css
HTTP/1.1" 304 -
192.168.1.254 - - [18/Dec/2002:01:09:20 1000] "GET
/avsSignon/images/YikesterLogo.gif HTTP/1.1" 304 -
192.168.1.254 - - [18/Dec/2002:01:09:20 1000] "GET
/avsSignon/images/visa.gif HTTP/1.1" 304 -
192.168.1.254 - - [18/Dec/2002:01:09:20 1000] "GET
/avsSignon/images/mastercard.gif HTTP/1.1" 304 -

Any help is greatly appreciated.

Stephan

--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>