Tomcat 8 Chunked Encoding

[Theo Sweeny <th...@avios.com>]

Hello All - I'm running Tomcat 8.0.21 on Linux 64x and there is a recent issue where clients making requests and declaring the header - Transfer-Encoding:chunked, have their connections hang, with no obvious leads in the logs.

I'm aware that up to version 8.0.9 there was a Tomcat vulnerability with regards to this header type.

Could it be that there are legacy Tomcat security features that are causing the request to hang?

Theo

Avios Group (AGL) Ltd is a limited company registered in England (registered number 2260073 and VAT number 512566754) whose registered address is Astral Towers, Betts Way, London Road, Crawley, West Sussex RH10 9XY . Avios Group (AGL) Limited is part of the IAG group of companies This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager.

Re: Tomcat 8 Chunked Encoding

[Christopher Schultz <ch...@christopherschultz.net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Theo,

On 2/8/16 10:17 AM, Theo Sweeny wrote:
> Hello All - I'm running Tomcat 8.0.21 on Linux 64x and there is a
> recent issue where clients making requests and declaring the header
> - Transfer-Encoding:chunked, have their connections hang, with no
> obvious leads in the logs.
> 
> I'm aware that up to version 8.0.9 there was a Tomcat vulnerability
> with regards to this header type.
> 
> Could it be that there are legacy Tomcat security features that are
> causing the request to hang?

Is it possible for you to test with 8.0.latest? 8.0.32 was just voted
stable.

- -chris
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAla4wUAACgkQ9CaO5/Lv0PBf4wCgpw/ZIXZFr6rn1LYmy7xK6lVj
Vz8AnRCANSoSzLEZEQ/9BgGWhxhJxRTd
=Jfv7
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org