[jira] [Commented] (LOG4J2-1475) High CPU utilization if large log message contains '${'

["Hikaru Abe (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/LOG4J2-1475?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15391740#comment-15391740 ] 

Hikaru Abe commented on LOG4J2-1475:
------------------------------------

if log message has many '${' token, the following code takes exponential time.

https://git-wip-us.apache.org/repos/asf?p=logging-log4j2.git;a=blob;f=log4j-core/src/main/java/org/apache/logging/log4j/core/pattern/MessagePatternConverter.java;h=75af44c8e7d6966bb832832fa4b764789a570758;hb=refs/heads/master#l100

i think the "Lookups" on %message behavior is undocumented, and common users expect to do property substitution only on message header (in configuration of PatternLayout), not on body. it leads information leaks.

> High CPU utilization if large log message contains '${'
> -------------------------------------------------------
>
>                 Key: LOG4J2-1475
>                 URL: https://issues.apache.org/jira/browse/LOG4J2-1475
>             Project: Log4j 2
>          Issue Type: Bug
>          Components: Layouts, Pattern Converters
>    Affects Versions: 2.6.2
>         Environment: JDK 7u80
>            Reporter: Hikaru Abe
>            Priority: Minor
>




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: log4j-dev-unsubscribe@logging.apache.org
For additional commands, e-mail: log4j-dev-help@logging.apache.org