You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hc.apache.org by "Oleg Kalnichevski (JIRA)" <ji...@apache.org> on 2017/02/05 11:18:42 UTC

[jira] [Resolved] (HTTPCLIENT-1812) CloseableHttpClient.execute generates SIGSEGV in jvm

     [ https://issues.apache.org/jira/browse/HTTPCLIENT-1812?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Oleg Kalnichevski resolved HTTPCLIENT-1812.
-------------------------------------------
    Resolution: Invalid

bq. 1. Evidently Java code should not be able to crash the JVM. But CloseableHttpClient.execute under certain conditions seems to be able to do so.

Java byte code no matter how crazy, wrong or malicious should _never_ be able to cause a SIGSEGV in a virtual machine. This is the whole point of having a VM in the first place. If it does it is a VM fault.

The URL in question works just fine for me
{code:java}
    CloseableHttpClient client = HttpClientBuilder.create()
            .build();
    HttpGet httpGet = new HttpGet("http://www.timeanddate.com/astronomy/germany/munich");
    try (CloseableHttpResponse response1 = client.execute(httpGet)) {
        System.out.println(response1.getStatusLine());
        EntityUtils.consume(response1.getEntity());
    }
{code}

{noformat}
[DEBUG] RequestAddCookies - CookieSpec selected: default
[DEBUG] RequestAuthCache - Auth cache not set in the context
[DEBUG] PoolingHttpClientConnectionManager - Connection request: [route: {}->http://www.timeanddate.com:80][total kept alive: 0; route allocated: 0 of 2; total allocated: 0 of 20]
[DEBUG] PoolingHttpClientConnectionManager - Connection leased: [id: 0][route: {}->http://www.timeanddate.com:80][total kept alive: 0; route allocated: 1 of 2; total allocated: 1 of 20]
[DEBUG] MainClientExec - Opening connection {}->http://www.timeanddate.com:80
[DEBUG] DefaultHttpClientConnectionOperator - Connecting to www.timeanddate.com/192.33.31.52:80
[DEBUG] DefaultHttpClientConnectionOperator - Connection established 10.71.25.196:59374<->192.33.31.52:80
[DEBUG] MainClientExec - Executing request GET /astronomy/germany/munich HTTP/1.1
[DEBUG] MainClientExec - Target auth state: UNCHALLENGED
[DEBUG] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] headers - http-outgoing-0 >> GET /astronomy/germany/munich HTTP/1.1
[DEBUG] headers - http-outgoing-0 >> Host: www.timeanddate.com
[DEBUG] headers - http-outgoing-0 >> Connection: Keep-Alive
[DEBUG] headers - http-outgoing-0 >> User-Agent: Apache-HttpClient/4.5.3 (Java/1.8.0_112)
[DEBUG] headers - http-outgoing-0 >> Accept-Encoding: gzip,deflate
[DEBUG] headers - http-outgoing-0 << HTTP/1.1 302 Moved Temporarily
[DEBUG] headers - http-outgoing-0 << Server: instart/nginx
[DEBUG] headers - http-outgoing-0 << Content-Type: text/html; charset=iso-8859-1
[DEBUG] headers - http-outgoing-0 << Content-Length: 204
[DEBUG] headers - http-outgoing-0 << Connection: keep-alive
[DEBUG] headers - http-outgoing-0 << Date: Sun, 05 Feb 2017 11:11:13 GMT
[DEBUG] headers - http-outgoing-0 << Content-Encoding: gzip
[DEBUG] headers - http-outgoing-0 << Age: 0
[DEBUG] headers - http-outgoing-0 << Accept-Ranges: bytes
[DEBUG] headers - http-outgoing-0 << Vary: Accept-Encoding
[DEBUG] headers - http-outgoing-0 << Location: https://www.timeanddate.com/astronomy/germany/munich
[DEBUG] headers - http-outgoing-0 << X-Instart-Request-ID: 14039458413059011751:SEN01-NPPRY23:1486293073:0
[DEBUG] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] DefaultRedirectStrategy - Redirect requested to location 'https://www.timeanddate.com/astronomy/germany/munich'
[DEBUG] RedirectExec - Resetting target auth state
[DEBUG] RedirectExec - Redirecting to 'https://www.timeanddate.com/astronomy/germany/munich' via {s}->https://www.timeanddate.com:443
[DEBUG] PoolingHttpClientConnectionManager - Connection [id: 0][route: {}->http://www.timeanddate.com:80] can be kept alive indefinitely
[DEBUG] PoolingHttpClientConnectionManager - Connection released: [id: 0][route: {}->http://www.timeanddate.com:80][total kept alive: 1; route allocated: 1 of 2; total allocated: 1 of 20]
[DEBUG] RequestAddCookies - CookieSpec selected: default
[DEBUG] RequestAuthCache - Auth cache not set in the context
[DEBUG] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://www.timeanddate.com:443][total kept alive: 1; route allocated: 0 of 2; total allocated: 1 of 20]
[DEBUG] PoolingHttpClientConnectionManager - Connection leased: [id: 1][route: {s}->https://www.timeanddate.com:443][total kept alive: 1; route allocated: 1 of 2; total allocated: 2 of 20]
[DEBUG] MainClientExec - Opening connection {s}->https://www.timeanddate.com:443
[DEBUG] DefaultHttpClientConnectionOperator - Connecting to www.timeanddate.com/192.33.31.52:443
[DEBUG] SSLConnectionSocketFactory - Connecting socket to www.timeanddate.com/192.33.31.52:443 with timeout 0
[DEBUG] SSLConnectionSocketFactory - Enabled protocols: [TLSv1, TLSv1.1, TLSv1.2]
[DEBUG] SSLConnectionSocketFactory - Enabled cipher suites:[TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, TLS_EMPTY_RENEGOTIATION_INFO_SCSV]
[DEBUG] SSLConnectionSocketFactory - Starting handshake
[DEBUG] SSLConnectionSocketFactory - Secure session established
[DEBUG] SSLConnectionSocketFactory -  negotiated protocol: TLSv1.2
[DEBUG] SSLConnectionSocketFactory -  negotiated cipher suite: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
[DEBUG] SSLConnectionSocketFactory -  peer principal: CN=ssl003.insnw.net, O="Instart Logic, Inc.", L=Mountain View, ST=California, C=US
[DEBUG] SSLConnectionSocketFactory -  peer alternative names: [ssl003.insnw.net, *.cnet.inscname.net, *.dominos.jp, *.eberjey.com, *.ed.edmunds-media.com, *.edmunds-media.com, *.finnmatkat.fi, *.fritidsresor.se, *.g00.capitalgazette.com, *.g00.carrollcountytimes.com, *.g00.courant.com, *.g00.extremetech.com, *.g00.ign.com, *.g00.mcall.com, *.g00.montrealgazette.com, *.g00.opshead.com, *.g00.orlandosentinel.com, *.g00.ottawacitizen.com, *.g00.sandiegouniontribune.com, *.g00.sun-sentinel.com, *.g00.zam.com, *.instartlogic.smugmug.com, *.monotype.com, *.opshead.com, *.orlandosentinel.com, *.qnet.eu.com, *.randomhouse.com, *.reebonz.com, *.rugstudio.com, *.shocho.co, *.stagingtss.com, *.startour.dk, *.startour.no, *.storemanagerweb.autonation.com, *.storemanagerweb.stgautonation.com, *.storemanagerwebw.autonation.com, *.sun-sentinel.com, *.tuinordic.com, *.ykso.co, *.zam.com, Assets.perf.tuinordic.com, Finnmatkat.fi.perf.tuinordic.com, Fritidsresor.se.perf.tuinordic.com, Startour.dk.perf.tuinordic.com, Startour.no.perf.tuinordic.com, Static.perf.tuinordic.com, a001.bostonglobe.inscname.net, *.a001.bostonglobe.inscname.net, a001.weather.inscname.net, *.a001.weather.inscname.net, a001.zamnetwork.inscname.net, *.a001.zamnetwork.inscname.net, a004.tronc.inscname.net, *.a004.tronc.inscname.net, a007.timeanddate.inscname.net, *.a007.timeanddate.inscname.net, a008.tronc.inscname.net, *.a008.tronc.inscname.net, a013.tronc.inscname.net, *.a013.tronc.inscname.net, a015.tronc.inscname.net, *.a015.tronc.inscname.net, a017.tronc.inscname.net, *.a017.tronc.inscname.net, a23.boston.inscname.net, *.a23.boston.inscname.net, abchome.com, *.abchome.com, about.com, *.about.com, achicanow.com, *.achicanow.com, airaid.com, *.airaid.com, alaskaair.com, *.alaskaair.com, alaskaair.net, *.alaskaair.net, api.chess-4.com, *.api.chess-4.com, arrow.com, *.arrow.com, assets.esicdn.cloud, *.assets.esicdn.cloud, assets.katespade.com, *.assets.katespade.com, autonation.com, *.autonation.com, autotrader.ca, *.autotrader.ca, baltimoresun.com, *.baltimoresun.com, baseballmonkey.com, *.baseballmonkey.com, bax-shop.co.uk, *.bax-shop.co.uk, bax-shop.es, *.bax-shop.es, bedroomworld.co.uk, *.bedroomworld.co.uk, bedstore.co.uk, *.bedstore.co.uk, beta.hearthhead.com, *.beta.hearthhead.com, boston.com, *.boston.com, bouclair.com, *.bouclair.com, buzzbuzzhome.com, *.buzzbuzzhome.com, buzzfed.com, *.buzzfed.com, bwgroups.bestwestern.com, *.bwgroups.bestwestern.com, cagesworld.co.uk, *.cagesworld.co.uk, calgarysun.com, *.calgarysun.com, canada.com, *.canada.com, canoe.com, *.canoe.com, casafina.com, *.casafina.com, cb-cdn.synapse-games.com, cdn.cb.yp.ca, *.cdn.cb.yp.ca, cdn.cbkgprod.com, cdn.katespade.com, *.cdn.katespade.com, cdn.katespade.tech, *.cdn.katespade.tech, cdn.solarforhomes.com, cdn1.rvtrader.com, *.cdn1.rvtrader.com, cdntest.moorings.com, *.cdntest.moorings.com, celebslam.com, *.celebslam.com, chesscomfiles-4.com, *.chesscomfiles-4.com, chesskid-4.com, *.chesskid-4.com, chesskid.com, *.chesskid.com, chesskidfiles-4.com, *.chesskidfiles-4.com, chesskidfiles.com, *.chesskidfiles.com, chroniclelive.co.uk, *.chroniclelive.co.uk, cirquedusoleil.com, *.cirquedusoleil.com, citalia.com, *.citalia.com, citilink.co.id, *.citilink.co.id, citypaper.com, *.citypaper.com, cms.vistaprint.io, *.cms.vistaprint.io, cnet.com, *.cnet.com, colehaan.com, *.colehaan.com, commun.it, *.commun.it, computershopper.com, *.computershopper.com, cromwell.co.uk, *.cromwell.co.uk, crystalski.co.uk, *.crystalski.co.uk, cstreet.net, ctnow.com, *.ctnow.com, dam-img.rfdcontent.com, *.dam-img.rfdcontent.com, daypack.co, *.daypack.co, delimano.hu, *.delimano.hu, delimano.ro, *.delimano.ro, delimano.rs, *.delimano.rs, demandware.net, *.demandware.net, destinydb.com, *.destinydb.com, dev.cdscosa.com, *.dev.cdscosa.com, devtss.com, *.devtss.com, dollarshaveclub.com, *.dollarshaveclub.com, dominos.jp, doorsworld.co, *.doorsworld.co, dormeo.hu, *.dormeo.hu, dormeo.ro, *.dormeo.ro, dormeo.rs, *.dormeo.rs, dupontregistry.com, *.dupontregistry.com, e3ssltestmobile3.newegg.com, e3wwwtestmobile3.newegg.com, eberjey.com, edmontonsun.com, *.edmontonsun.com, edmunds.com, *.edmunds.com, eharmony.com, *.eharmony.com, eharmony.com.au, *.eharmony.com.au, equipmenttrader.com, *.equipmenttrader.com, esitest.cloud, *.esitest.cloud, everydayhealth.com, *.everydayhealth.com, extremetech.com, *.extremetech.com, falconholidaysprjuat.ie, *.falconholidaysprjuat.ie, fashionwashington.com, *.fashionwashington.com, finnmatkat.fi, fivefourclub.com, *.fivefourclub.com, focus.de, *.focus.de, forrent.com, *.forrent.com, fritidsresor.se, frmonline.com, *.frmonline.com, g00.about.com, *.g00.about.com, g00.askmen.com, *.g00.askmen.com, g00.beta.hearthhead.com, *.g00.beta.hearthhead.com, g00.boston.com, *.g00.boston.com, g00.calgaryherald.com, *.g00.calgaryherald.com, g00.calgarysun.com, *.g00.calgarysun.com, g00.canada.com, *.g00.canada.com, g00.canoe.com, *.g00.canoe.com, g00.capitalgazette.com, g00.carrollcountytimes.com, g00.celebslam.com, *.g00.celebslam.com, g00.chicagotribune.com, *.g00.chicagotribune.com, g00.chroniclelive.co.uk, *.g00.chroniclelive.co.uk, g00.citypaper.com, *.g00.citypaper.com, g00.cnet.com, *.g00.cnet.com, g00.computershopper.com, *.g00.computershopper.com, g00.courant.com, g00.ctnow.com, *.g00.ctnow.com, g00.dailypress.com, *.g00.dailypress.com, g00.destinydb.com, *.g00.destinydb.com, g00.edmontonjournal.com, *.g00.edmontonjournal.com, g00.edmontonsun.com, *.g00.edmontonsun.com, g00.edmunds.com, *.g00.edmunds.com, g00.everydayhealth.com, *.g00.everydayhealth.com, g00.extremetech.com, g00.faceoff.com, *.g00.faceoff.com, g00.financialpost.com, *.g00.financialpost.com, g00.gamepedia.com, *.g00.gamepedia.com, g00.gamerevolution.com, *.g00.gamerevolution.com, g00.geek.com, *.g00.geek.com, g00.hearthhead.com, *.g00.hearthhead.com, g00.hockeyinsideout.com, *.g00.hockeyinsideout.com, g00.holidaycheck.de, *.g00.holidaycheck.de, g00.ibtimes.com, *.g00.ibtimes.com, g00.idigitaltimes.com, *.g00.idigitaltimes.com, g00.latimes.com, *.g00.latimes.com, g00.leaderpost.com, *.g00.leaderpost.com, g00.legacy.com, *.g00.legacy.com, g00.lfpress.com, *.g00.lfpress.com, g00.logicbuy.com, *.g00.logicbuy.com, g00.lolking.net, *.g00.lolking.net, g00.mamaslatinas.com, *.g00.mamaslatinas.com, g00.mcall.com, g00.mmo-champion.com, *.g00.mmo-champion.com, g00.msn.com, *.g00.msn.com, g00.mtstandard.com, *.g00.mtstandard.com, g00.nasdaq.com, *.g00.nasdaq.com, g00.nationalpost.com, *.g00.nationalpost.com, g00.ottawasun.com, *.g00.ottawasun.com, g00.pcmag.com, *.g00.pcmag.com, g00.photobucket.com, *.g00.photobucket.com, g00.redeyechicago.com, *.g00.redeyechicago.com, g00.sandiegouniontribune.com, g00.saveur.com, *.g00.saveur.com, g00.sherdog.com, *.g00.sherdog.com, g00.sporcle.com, *.g00.sporcle.com, g00.staging.lolking.net, *.g00.staging.lolking.net, g00.stltoday.com, *.g00.stltoday.com, g00.thegiftguide.ca, *.g00.thegiftguide.ca, g00.theprovince.com, *.g00.theprovince.com, g00.thestarphoenix.com, *.g00.thestarphoenix.com, g00.timeanddate.com, *.g00.timeanddate.com, g00.tmn.today, *.g00.tmn.today, g00.torontosun.com, *.g00.torontosun.com, g00.trustedreviews.com, *.g00.trustedreviews.com, g00.twincities.com, *.g00.twincities.com, g00.wapo.i10c.net, *.g00.wapo.i10c.net, g00.weather.com, *.g00.weather.com, g00.windsorstar.com, *.g00.windsorstar.com, g00.winnipegsun.com, *.g00.winnipegsun.com, g00.wowhead.com, *.g00.wowhead.com, g00.www.about.com, *.g00.www.about.com, g00.www.boston.com, *.g00.www.boston.com, g00.www.edmunds.com, *.g00.www.edmunds.com, g00.www.photobucket.com, *.g00.www.photobucket.com, g00.www.sporcle.com, *.g00.www.sporcle.com, gamepedia.com, *.gamepedia.com, gamerevolution.com, *.gamerevolution.com, gardenfurnitureworld.com, *.gardenfurnitureworld.com, goo.lolking.net, *.goo.lolking.net, grouponcdn.com, *.grouponcdn.com, haycdn.com, *.haycdn.com, hayesandjarvis.co.uk, *.hayesandjarvis.co.uk, hearthhead.com, *.hearthhead.com, henhouse.reachoffers.com, holidaycheck.de, *.holidaycheck.de, holidayhype.co.uk, *.holidayhype.co.uk, homes.com, *.homes.com, honestqa.com, *.honestqa.com, hourglassangel.com, *.hourglassangel.com, i10c.net, *.i10c.net, iassets.anki.com, ibtimes.com, *.ibtimes.com, idigitaltimes.com, *.idigitaltimes.com, images.katespade.com, *.images.katespade.com, images17.newegg.com, imagesinstest.newegg.com, imagesinstest2.newegg.com, imagesinstest3.newegg.com, inscname.net, *.inscname.net, instart-naturalgrocers.staging.reachoffers.com, *.instart-naturalgrocers.staging.reachoffers.com, instartlogic.firmex.com, instartlogic.smugmug.com, interana.com, *.interana.com, jackthreads.com, *.jackthreads.com, jetsave.com, *.jetsave.com, justjeans.com.au, *.justjeans.com.au, k.to, *.k.to, katespade.com, *.katespade.com, kiddicare.com, *.kiddicare.com, kingston.com, *.kingston.com, latimes.com, *.latimes.com, leadingbusinessloans.com, *.leadingbusinessloans.com, legacy.com, *.legacy.com, lepanierfrancais.com, *.lepanierfrancais.com, levainbakery.com, *.levainbakery.com, lfpress.com, *.lfpress.com, liveactive.hu, *.liveactive.hu, liveactive.ro, *.liveactive.ro, liveactive.rs, *.liveactive.rs, logicbuy.com, *.logicbuy.com, lolking.net, *.lolking.net, m-int1.wag-static.com, m-int1.walgreens.com, m-qa.wag-static.com, m-qa2.walgreens.com, m.dotti.co.nz, m.dotti.com.au, m.jacquie.com.au, magnettrade.co.uk, *.magnettrade.co.uk, mamaslatinas.com, *.mamaslatinas.com, marahoffman.com, *.marahoffman.com, marjoon.com, *.marjoon.com, mattressesworld.co.uk, *.mattressesworld.co.uk, meaningfulbeauty.com, *.meaningfulbeauty.com, media.journeys.ca, media.journeys.com, mma.tv, *.mma.tv, mmo-champion.com, *.mmo-champion.com, mmoui.com, *.mmoui.com, modern.co.uk, *.modern.co.uk, monotype.com, moorings.com, *.moorings.com, moovdemos.com, *.moovdemos.com, moovweb.net, *.moovweb.net, msn.inscname.net, *.msn.inscname.net, mtstandard.com, *.mtstandard.com, n-int1.wag-static.com, n-int1.walgreens.com, n-qa.wag-static.com, n-qa2.walgreens.com, nanovisor.io, *.nanovisor.io, nasdaq.com, *.nasdaq.com, naturalgrocers.reachoffers.com, naveensbiscuits.us, *.naveensbiscuits.us, neimans.reachoffers.com, nflexperience.com, *.nflexperience.com, nomorerack.com, *.nomorerack.com, nudatasecurity.com, *.nudatasecurity.com, odistatic.net, *.odistatic.net, officesupermarket.co.uk, *.officesupermarket.co.uk, omnihotels.com, *.omnihotels.com, ottawasun.com, *.ottawasun.com, pacificsunwear.com, *.pacificsunwear.com, pacsun.com, *.pacsun.com, padlockoutlet.com, *.padlockoutlet.com, pcmag.com, *.pcmag.com, pearlsecurityblog.com, *.pearlsecurityblog.com, penseurope.com, *.penseurope.com, photobucket.com, *.photobucket.com, pixlee.com, *.pixlee.com, plated.com, *.plated.com, portmans.com.au, *.portmans.com.au, predictiveedge.com, *.predictiveedge.com, principalsecret.com, *.principalsecret.com, qa.journeys.com, qa.thrivemarket.com, *.qa.thrivemarket.com, qaautonation.com, *.qaautonation.com, qfactor.io, *.qfactor.io, qnet.eu.com, randomhouse.com, rbauction.com, *.rbauction.com, redeyechicago.com, *.redeyechicago.com, reebonz.com, rent.com, *.rent.com, revolt.tv, *.revolt.tv, rfdcontent.com, *.rfdcontent.com, rockler.com, *.rockler.com, rocklerpro.com, *.rocklerpro.com, rugstudio.com, rugstudio.net, *.rugstudio.net, saatva.com, *.saatva.com, saintsociety.com, *.saintsociety.com, saveur.com, *.saveur.com, sbstatic.net, *.sbstatic.net, scentbird.com, *.scentbird.com, scorebig.com, *.scorebig.com, secure.poppin.com, shedsworld.co.uk, *.shedsworld.co.uk, sheknows.com, *.sheknows.com, sherdog.com, *.sherdog.com, shocho.co, shophopes.com, *.shophopes.com, skim.gs, *.skim.gs, sofasworld.co.uk, *.sofasworld.co.uk, sovereign.com, *.sovereign.com, sporcle.com, *.sporcle.com, staging.lolking.net, *.staging.lolking.net, staging.thrivemarket.com, *.staging.thrivemarket.com, stagingtss.com, startour.dk, startour.no, static-homes.com, *.static-homes.com, static.worldstores.co, *.static.worldstores.co, stgautonation.com, *.stgautonation.com, stltoday.com, *.stltoday.com, stylesaint.com, *.stylesaint.com, sunsail.co.uk, *.sunsail.co.uk, thehunt.com, *.thehunt.com, thingsremembered.com, *.thingsremembered.com, thrivemarket.com, *.thrivemarket.com, timeanddate.com, *.timeanddate.com, tmn.today, *.tmn.today, top-shop.ro, *.top-shop.ro, top-shop.rs, *.top-shop.rs, topshop.hu, *.topshop.hu, torontosun.com, *.torontosun.com, totalbeauty.com, *.totalbeauty.com, touchofmodern.com, *.touchofmodern.com, tryitnow.com, *.tryitnow.com, tuinordic.com, twincities.com, *.twincities.com, vistaprint.co.uk, *.vistaprint.co.uk, vistaprint.com, *.vistaprint.com, vistaprint.de, *.vistaprint.de, vphosted.com, *.vphosted.com, walkmaxx.hu, *.walkmaxx.hu, walkmaxx.ro, *.walkmaxx.ro, walkmaxx.rs, *.walkmaxx.rs, weather.com, *.weather.com, winnipegsun.com, *.winnipegsun.com, wodify.com, *.wodify.com, woodmansfood.staging.reachoffers.com, worldstores.co, *.worldstores.co, worldstores.co.uk, *.worldstores.co.uk, wowhead.com, *.wowhead.com, wrap.co, *.wrap.co, www.americanbuildersoutlet.com, www.askmen.com, *.www.askmen.com, www.capitalgazette.com, www.carrollcountytimes.com, www.chess-4.com, *.www.chess-4.com, www.courant.com, www.dotti.co.nz, www.dotti.com.au, www.edmunds.com, *.www.edmunds.com, www.geek.com, *.www.geek.com, www.instartdemo.com, *.www.instartdemo.com, www.jacquie.com.au, www.mcall.com, www.nasdaq.com, *.www.nasdaq.com, www.sandiegouniontribune.com, www.shutterstock.com, *.www.shutterstock.com, wysadacdn.com, *.wysadacdn.com, ykso.co, yp.ca, *.yp.ca, zenhaven.com, *.zenhaven.com, zoro.de, *.zoro.de, zorotools.de, *.zorotools.de]
[DEBUG] SSLConnectionSocketFactory -  issuer principal: CN=GlobalSign CloudSSL CA - SHA256 - G3, O=GlobalSign nv-sa, C=BE
[DEBUG] DefaultHttpClientConnectionOperator - Connection established 10.71.25.196:54058<->192.33.31.52:443
[DEBUG] MainClientExec - Executing request GET /astronomy/germany/munich HTTP/1.1
[DEBUG] MainClientExec - Target auth state: UNCHALLENGED
[DEBUG] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] headers - http-outgoing-1 >> GET /astronomy/germany/munich HTTP/1.1
[DEBUG] headers - http-outgoing-1 >> Host: www.timeanddate.com
[DEBUG] headers - http-outgoing-1 >> Connection: Keep-Alive
[DEBUG] headers - http-outgoing-1 >> User-Agent: Apache-HttpClient/4.5.3 (Java/1.8.0_112)
[DEBUG] headers - http-outgoing-1 >> Accept-Encoding: gzip,deflate
[DEBUG] headers - http-outgoing-1 << HTTP/1.1 200 OK
[DEBUG] headers - http-outgoing-1 << Content-Type: text/html; charset=UTF-8
[DEBUG] headers - http-outgoing-1 << Content-Length: 12679
[DEBUG] headers - http-outgoing-1 << Connection: keep-alive
[DEBUG] headers - http-outgoing-1 << Server: nginx
[DEBUG] headers - http-outgoing-1 << Date: Sun, 05 Feb 2017 11:11:13 GMT
[DEBUG] headers - http-outgoing-1 << X-Powered-By: PHP/5.4.45-0+deb7u2
[DEBUG] headers - http-outgoing-1 << X-Frame-Options: SAMEORIGIN
[DEBUG] headers - http-outgoing-1 << Cache-Control: max-age=0, no-cache, no-store
[DEBUG] headers - http-outgoing-1 << Set-Cookie: TIMEANDDATE_SESSION=T_1486293073%3AC_1%3Ad7_1%3Ad3_1%3A; expires=Mon, 06-Feb-2017 11:11:13 GMT; path=/; domain=timeanddate.com; secure
[DEBUG] headers - http-outgoing-1 << Pragma: no-cache
[DEBUG] headers - http-outgoing-1 << Vary: Accept-Encoding
[DEBUG] headers - http-outgoing-1 << Age: 0
[DEBUG] headers - http-outgoing-1 << Content-Encoding: gzip
[DEBUG] headers - http-outgoing-1 << X-Instart-Request-ID: 15028992817099479179:SEN01-NPPRY23:1486293073:0
[DEBUG] MainClientExec - Connection can be kept alive indefinitely
HTTP/1.1 200 OK
[DEBUG] ResponseProcessCookies - Cookie accepted [TIMEANDDATE_SESSION="T_1486293073%3AC_1%3Ad7_1%3Ad3_1%3A", version:0, domain:timeanddate.com, path:/, expiry:Mon Feb 06 12:11:13 CET 2017]
[DEBUG] PoolingHttpClientConnectionManager - Connection [id: 1][route: {s}->https://www.timeanddate.com:443] can be kept alive indefinitely
[DEBUG] PoolingHttpClientConnectionManager - Connection released: [id: 1][route: {s}->https://www.timeanddate.com:443][total kept alive: 2; route allocated: 1 of 2; total allocated: 2 of 20]
{noformat}

Oleg

> CloseableHttpClient.execute generates SIGSEGV in jvm
> ----------------------------------------------------
>
>                 Key: HTTPCLIENT-1812
>                 URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1812
>             Project: HttpComponents HttpClient
>          Issue Type: Bug
>          Components: HttpClient (classic)
>    Affects Versions: 4.5.2, 4.5.3
>         Environment: openjdk version "1.8.0_121"
> OpenJDK Runtime Environment (IcedTea 3.3.0) (suse-6.4-x86_64)
> OpenJDK 64-Bit Server VM (build 25.121-b13, mixed mode)
>            Reporter: Harald Brennich
>         Attachments: hs_error.log
>
>
> I am using HttpComponents to read a specific web page. This worked fine until yesterday (02/03/2017). Now, on executing a request to the URI http://www.timeanddate.com/astronomy/germany/munich, the JVM reports a SIGSEGV. See attachment.for version 4.53. Version 4.5.2 was similar.
> On slightly modifying the calling java code by instantiating the HttpClientBuilder before building the CloseableHttpClient, instead of sigsegving an exception is thrown:
> "
> 	 java.lang.OutOfMemoryError: Java heap space
> 	 sun.security.ec.ECKeyPairGenerator.generateECKeyPair(Native Method)
> 	 sun.security.ec.ECKeyPairGenerator.generateKeyPair(ECKeyPairGenerator.java:126)
> 	 java.security.KeyPairGenerator$Delegate.generateKeyPair(KeyPairGenerator.java:704)
> 	 sun.security.ssl.ECDHCrypt.<init>(ECDHCrypt.java:78)
> 	 sun.security.ssl.ClientHandshaker.serverKeyExchange(ClientHandshaker.java:717)
> 	 sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:278)
> 	 sun.security.ssl.Handshaker.processLoop(Handshaker.java:913)
> 	 sun.security.ssl.Handshaker.process_record(Handshaker.java:849)
> 	 sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1033)
> 	 sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1342)
> 	 sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1369)
> 	 sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1353)
> 	 org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:396)
> 	 org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:355)
> 	 org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:142)
> 	 org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:359)
> 	 org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:381)
> 	 org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:237)
> 	 org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:185)
> 	 org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:89)
> 	 org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:111)
> 	 org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:185)
> 	 org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:83)
> 	 org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:108)
> "
> Finally, on setting the user agent (via HttpClientBuilder.setUserAgent) to
> "Mozilla/5.0 (X11; Linux x86_64; rv:50.0) Gecko/20100101 Firefox/50.0" the CloseableHttpClient.execute works again (as it did  previously)



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org