You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Elias Kopsiaftis <ye...@gmail.com> on 2014/05/29 20:13:25 UTC
comet question
Hey guys,
I found this on the web, and it really alarms me because my web app which
is in development depends on Comet technology to work.
http://bighow.net/4294974-Comet_under_Tomcat_6_0_33_sends_data_to_a_wrong_user.html
Before I start digging into the tomcat7 source code, can anyone verify or
contest the issue on that site? If Comet is not 100%
dependable, how about WebSockets as an alternative?
Re: comet question
Posted by Elias Kopsiaftis <ye...@gmail.com>.
I am having random errors, but we are still looking into them because right
now we think they are probably from our end. The current one is that the
connection from the client to the comet servlet will randomly repeatedly
receive "NULL". Still looking into this to see what the server is doing
On Thu, May 29, 2014 at 3:13 PM, Christopher Schultz <
chris@christopherschultz.net> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> Elias,
>
> On 5/29/14, 3:08 PM, Elias Kopsiaftis wrote:
> > To make sure it doesnt exist in Tomcat7. Thats why. Ive never
> > looked into the tomcat source code and theres no point for my
> > current project unless this bug still exists. Just trying to save
> > myself the work. Also, I couldnt find a page of known tomcat7 comet
> > issues. If such a page existed it would be helpful
>
> Check Bugzilla. Anything logged and not fixed is "known", I suppose.
>
> Also check the changelogs. Feel free to check everything between Tomat
> 6.0.33 and Tomcat 7.0.54, but that's a lot of reading.
>
> Are you actually having a problem, or are you just scared of what
> might be out there?
>
> To my knowledge, there are no proofs that Tomcat has zero flaws.
> Therefore, it could potentially serve every response to the wrong
> client. Experience says that does not happen. Common sense also tells
> you that, because nobody would use Tomcat if it was so horribly broken.
>
> There have been related bugs in the past that have been fixed when
> found. If you think you have found one, please report it with as much
> information as you can. But if you are just asking if there is a known
> problem with Tomcat where responses go to the wrong client, the answer
> is "no": if we knew about a problem, we'd fix it and roll a new release.
>
> - -chris
>
> > On Thu, May 29, 2014 at 2:45 PM, David kerber
> > <dc...@verizon.net> wrote:
> >
> >> On 5/29/2014 2:21 PM, Elias Kopsiaftis wrote:
> >>
> >>> oh yea, im on tomcat 7 btw
> >>>
> >>
> >> Then why are you asking about a problem in a very old version of
> >> Tomcat 6?
> >>
> >>
> >>
> >>
> >>>
> >>> On Thu, May 29, 2014 at 2:13 PM, Elias Kopsiaftis
> >>> <ye...@gmail.com> wrote:
> >>>
> >>> Hey guys,
> >>>>
> >>>> I found this on the web, and it really alarms me because my
> >>>> web app which is in development depends on Comet technology
> >>>> to work.
> >>>>
> >>>>
> >>>> http://bighow.net/4294974-Comet_under_Tomcat_6_0_33_
> >>>> sends_data_to_a_wrong_user.html
> >>>>
> >>>> Before I start digging into the tomcat7 source code, can
> >>>> anyone verify or contest the issue on that site? If Comet is
> >>>> not 100% dependable, how about WebSockets as an alternative?
> >>>>
> >>>>
> >>>
> >>
> >> ---------------------------------------------------------------------
> >>
> >>
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> >> For additional commands, e-mail: users-help@tomcat.apache.org
> >>
> >>
> >
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1
> Comment: GPGTools - http://gpgtools.org
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iQIcBAEBCAAGBQJTh4btAAoJEBzwKT+lPKRYhvgQAMO2/TysR56uWeAo3nDRiJZP
> 2R9Q26t0UmAVqbUfujs0VtCGTySv6LKCHgbG6I/XQotSbdeaWY9jIZphqpLxylLV
> T24WqIFAv2J4ZLsx/W09pXMqvErVnp0kuesaFnEj4ooOfqATRTG0oscgQxy6Qrtb
> kzoOHYxG8c0/T/RnvNF+97F3ybRdwpW4U2TwLvtMYCw6H9MSzUPRJLdSIbnA4oS2
> Bf7OcVoHCJ/53ODDuUfTpFXZgEucNmq58HHRaV0TYBQjIv1GwMMe889MWrfIQzuO
> rmHbXqORb/tRTZeV2DxPZ2t3AS0qU6K1qz4SDX91jngMJg9Uclvh8iW5pSi8K5y9
> a9ZGoB4nVX9vZlkLwazfHfvUXwFVfzqZL9yYaSc7cT8EGf/47KV/xjRombdKyw18
> /M4pNEBrD+hOqKKB24J3u6v1aGuz6ffUZ8io94bAGNm+Nq86+cL45PxQ49pkyVIk
> T7FQbM/NDgNJVRdByHalPlPyFtvC4d6mpU+yG9ryyESy1yCyMx9ojNTA/gt0IJ40
> CZdqnPkEAsrzIadRYi/2n3eTQFrABHmH+jfh1ShzxLsd96mxz7GC1DM26yoJq/ok
> ckiEY0zY058Csp1NafRoSKbDSQ48pkvBvF0eccym3fCZwknA22a9iuZ9eRkLXbdO
> NxKin3hu9RQlMzCC1jmI
> =yrsV
> -----END PGP SIGNATURE-----
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
Re: comet question
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Elias,
On 5/29/14, 3:08 PM, Elias Kopsiaftis wrote:
> To make sure it doesnt exist in Tomcat7. Thats why. Ive never
> looked into the tomcat source code and theres no point for my
> current project unless this bug still exists. Just trying to save
> myself the work. Also, I couldnt find a page of known tomcat7 comet
> issues. If such a page existed it would be helpful
Check Bugzilla. Anything logged and not fixed is "known", I suppose.
Also check the changelogs. Feel free to check everything between Tomat
6.0.33 and Tomcat 7.0.54, but that's a lot of reading.
Are you actually having a problem, or are you just scared of what
might be out there?
To my knowledge, there are no proofs that Tomcat has zero flaws.
Therefore, it could potentially serve every response to the wrong
client. Experience says that does not happen. Common sense also tells
you that, because nobody would use Tomcat if it was so horribly broken.
There have been related bugs in the past that have been fixed when
found. If you think you have found one, please report it with as much
information as you can. But if you are just asking if there is a known
problem with Tomcat where responses go to the wrong client, the answer
is "no": if we knew about a problem, we'd fix it and roll a new release.
- -chris
> On Thu, May 29, 2014 at 2:45 PM, David kerber
> <dc...@verizon.net> wrote:
>
>> On 5/29/2014 2:21 PM, Elias Kopsiaftis wrote:
>>
>>> oh yea, im on tomcat 7 btw
>>>
>>
>> Then why are you asking about a problem in a very old version of
>> Tomcat 6?
>>
>>
>>
>>
>>>
>>> On Thu, May 29, 2014 at 2:13 PM, Elias Kopsiaftis
>>> <ye...@gmail.com> wrote:
>>>
>>> Hey guys,
>>>>
>>>> I found this on the web, and it really alarms me because my
>>>> web app which is in development depends on Comet technology
>>>> to work.
>>>>
>>>>
>>>> http://bighow.net/4294974-Comet_under_Tomcat_6_0_33_
>>>> sends_data_to_a_wrong_user.html
>>>>
>>>> Before I start digging into the tomcat7 source code, can
>>>> anyone verify or contest the issue on that site? If Comet is
>>>> not 100% dependable, how about WebSockets as an alternative?
>>>>
>>>>
>>>
>>
>> ---------------------------------------------------------------------
>>
>>
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
>>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/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=yrsV
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: comet question
Posted by Elias Kopsiaftis <ye...@gmail.com>.
To make sure it doesnt exist in Tomcat7. Thats why. Ive never looked into
the tomcat source code and theres no point for my current project unless
this bug still exists. Just trying to save myself the work. Also, I couldnt
find a page of known tomcat7 comet issues. If such a page existed it would
be helpful
On Thu, May 29, 2014 at 2:45 PM, David kerber <dc...@verizon.net> wrote:
> On 5/29/2014 2:21 PM, Elias Kopsiaftis wrote:
>
>> oh yea, im on tomcat 7 btw
>>
>
> Then why are you asking about a problem in a very old version of Tomcat 6?
>
>
>
>
>>
>> On Thu, May 29, 2014 at 2:13 PM, Elias Kopsiaftis <ye...@gmail.com>
>> wrote:
>>
>> Hey guys,
>>>
>>> I found this on the web, and it really alarms me because my web app which
>>> is in development depends on Comet technology to work.
>>>
>>>
>>> http://bighow.net/4294974-Comet_under_Tomcat_6_0_33_
>>> sends_data_to_a_wrong_user.html
>>>
>>> Before I start digging into the tomcat7 source code, can anyone verify or
>>> contest the issue on that site? If Comet is not 100%
>>> dependable, how about WebSockets as an alternative?
>>>
>>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
Re: comet question
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Elias,
On 5/29/14, 3:12 PM, Elias Kopsiaftis wrote:
> ok thanks guys, I just got freaked out when I saw that post.
There are other things that might freak you out. Read the security
statements for Tomcat 7, for instance, and decide if you are at the
right patch level.
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/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=bQcf
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: comet question
Posted by Elias Kopsiaftis <ye...@gmail.com>.
ok thanks guys, I just got freaked out when I saw that post.
On Thu, May 29, 2014 at 3:10 PM, Christopher Schultz <
chris@christopherschultz.net> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> David,
>
> On 5/29/14, 2:45 PM, David kerber wrote:
> > On 5/29/2014 2:21 PM, Elias Kopsiaftis wrote:
> >> oh yea, im on tomcat 7 btw
> >
> > Then why are you asking about a problem in a very old version of
> > Tomcat 6?
>
> +1
>
> Also, that web site looks like a scraping site that steals content
> from some other site like StackOverflow, Nabble, etc.
>
> The "question" isn't even complete.... it cuts off in the middle.
>
> Errors of this kind are usually due to a problem in the application,
> but there have been some edge cases found over the last few years and
> patched.
>
> You should make sure you are using the most up-to-date patch version
> of Tomcat in your release line. If you are using Tomcat 7, you want to
> make sure you are using Tomcat 7.0.54 which was just recently released
> and includes a few security updates.
>
> As for a technology for the future, you should dump Comet: the world
> is standardizing on Websocket. Java EE now includes a Websocket API,
> so you'll be able to deploy Websocket-based web applications on any
> compliant container instead of tying yourself to the Tomcat-specific
> Comet implementation.
>
> - -chris
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1
> Comment: GPGTools - http://gpgtools.org
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iQIcBAEBCAAGBQJTh4YUAAoJEBzwKT+lPKRYGG4QAMta8eJb8vCRFz/+JKLxLmja
> Ufeklv7CL1W+UDcljU/0t9YuWk1pfGiXRn2ORgLDuZUee69Eb2c959z4owpMaEiX
> ctqWTre1qA7sYCuQkBHehsOP4ohGYnhvndFeqJEMHedoQvj1y5WsNydXMwCYhCx3
> czWYbrL3tb8h6VjOMfEEOi1LFyV7hNIvaKt4I4WRw+8HMC6kLRTvoJf0JB8Ikj0s
> JZ9whO481K6H6WhxNYSx+/VrOUsX986LNXqnsEbhGhrEq3OJsBgF5Tmfy068PqbX
> OlzVDJP8wNpriauFpKDLrB/KKvQKnFEbEEcJ9rXJs799+3URkOZ7e63Cw9wN1Ie4
> 30kaGCt+qNQswV2WAKaJz9wJQATO2TVb+Cf/fA2XKzGpCDCR1wC3dJo2Tk4RW7q8
> QJJ72TpZEGr/b4V67MSbKZhN28MQnzIIeKp+0105n2Bvjwomof6Lz7c2RMD9+YJQ
> K8RYyBD5K6eQqoOn3+9aWTjPPYLy6zquoQV5bWiVmasBs9VdiuhSpdlNbKL8D9Ot
> rkYuz9QhlSTxftQPbSVkIV8xxhQJlhHkXYCd+pXhSCPJ7VeqhPHmz8gnDj4v6RAJ
> oBDvxLpaNySoh970rf5yIQhJATTCMwZyxEZlQ2rI+HUg9VrnVUlT/hRnPMFwYZml
> fFIxarosofRPMdiBIVta
> =tRxc
> -----END PGP SIGNATURE-----
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
Re: comet question
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
David,
On 5/29/14, 2:45 PM, David kerber wrote:
> On 5/29/2014 2:21 PM, Elias Kopsiaftis wrote:
>> oh yea, im on tomcat 7 btw
>
> Then why are you asking about a problem in a very old version of
> Tomcat 6?
+1
Also, that web site looks like a scraping site that steals content
from some other site like StackOverflow, Nabble, etc.
The "question" isn't even complete.... it cuts off in the middle.
Errors of this kind are usually due to a problem in the application,
but there have been some edge cases found over the last few years and
patched.
You should make sure you are using the most up-to-date patch version
of Tomcat in your release line. If you are using Tomcat 7, you want to
make sure you are using Tomcat 7.0.54 which was just recently released
and includes a few security updates.
As for a technology for the future, you should dump Comet: the world
is standardizing on Websocket. Java EE now includes a Websocket API,
so you'll be able to deploy Websocket-based web applications on any
compliant container instead of tying yourself to the Tomcat-specific
Comet implementation.
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/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=tRxc
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: comet question
Posted by David kerber <dc...@verizon.net>.
On 5/29/2014 2:21 PM, Elias Kopsiaftis wrote:
> oh yea, im on tomcat 7 btw
Then why are you asking about a problem in a very old version of Tomcat 6?
>
>
> On Thu, May 29, 2014 at 2:13 PM, Elias Kopsiaftis <ye...@gmail.com> wrote:
>
>> Hey guys,
>>
>> I found this on the web, and it really alarms me because my web app which
>> is in development depends on Comet technology to work.
>>
>>
>> http://bighow.net/4294974-Comet_under_Tomcat_6_0_33_sends_data_to_a_wrong_user.html
>>
>> Before I start digging into the tomcat7 source code, can anyone verify or
>> contest the issue on that site? If Comet is not 100%
>> dependable, how about WebSockets as an alternative?
>>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: comet question
Posted by Elias Kopsiaftis <ye...@gmail.com>.
oh yea, im on tomcat 7 btw
On Thu, May 29, 2014 at 2:13 PM, Elias Kopsiaftis <ye...@gmail.com> wrote:
> Hey guys,
>
> I found this on the web, and it really alarms me because my web app which
> is in development depends on Comet technology to work.
>
>
> http://bighow.net/4294974-Comet_under_Tomcat_6_0_33_sends_data_to_a_wrong_user.html
>
> Before I start digging into the tomcat7 source code, can anyone verify or
> contest the issue on that site? If Comet is not 100%
> dependable, how about WebSockets as an alternative?
>