You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Mi...@arctis.at on 2020/03/04 09:04:28 UTC
Severe problem when migrating from tomcat v7.0.99 to 7.0.100?
Hello,
We are currently fighting with the tomcat update from v7.0.99 to v7.0.100. Since there are open security issues in v7.0.99 we are forced to do it promptly, however I have the feeling that we detected a major issue in v7.0.100.
We have a Faces-Application, based on org=”org.glassfish" name="javax.faces" rev="2.3.9”.
It seems that v7.0.100 does not load the FacesInitializer, declared in /META-INF/services/javax.servlet.ServletContainerInitializer, whereas v7.0.99 does.
The FacesInitializer initializes, e.g. classes annotated with @FacesConverter or @FacesValidator, which won’t be available any more.
It seems related with the following entries in the changelog:
<https://bz.apache.org/bugzilla/show_bug.cgi?id=64021> 64021: Ensure that container provided SCIs are always loaded before application provided SCIs. Note that where both the container and the application provide the same SCI, it is the application provided SCI that will be used. (markt)
SCI definitions from JARs unpacked into WEB-INF/classes are now handled consistently and will always be found irrespective of whether the web application defines a JAR ordering or not. (markt)
Our current workaround is, to copy the file /META-INF/services/javax.servlet.ServletContainerInitializer Into the WEB-INF/classes – Folder.
Before filing this as a Bug Report, I would like to post it in this forum to get feedback. To demonstrate the issue, I provided a simple demonstration war-Project via a temporary download link: http://server.arctis.at/tmp/ProblemDemoProject.war
Depending on your installation, the call to https://localhost:8443/ProblemDemoProject/ should return in v7.0.99 something like
Startvalue: Hello World
Converted value: HELLO WORLD (converted by DemoConverter
With v7.0.100 it returns
An Error Occurred:
Ausdrucksfehler: Benanntes Objekt demoConverter nicht gefunden.
(sorry German localization: should read expression error: named object demoConverter not found)
…
04.03.2020 08:51:07 - Generated by Mojarra/Facelets
Feedback welcome.
As an addendum: Meanwhile I have detected <https://bz.apache.org/bugzilla/show_bug.cgi?id=64191> https://bz.apache.org/bugzilla/show_bug.cgi?id=64191 .
I’m pretty sure that the problem is related with it. Just use my demo web application for an regression test 😊.
Michael
Dr. Michael Breu
Michael.Breu@arctis.at <ma...@qe-lab.com> Tel. +43 676 3439918
arctis Softwaretechnologie GmbH, GF. Dr. Michael Breu
6401 Inzing, Jägerweg 2 Firmenbuch FN 230395 t
Re: Severe problem when migrating from tomcat v7.0.99 to 7.0.100?
Posted by Mark Thomas <ma...@apache.org>.
On 04/03/2020 09:04, Michael.Breu@arctis.at wrote:
> Hello,
>
> We are currently fighting with the tomcat update from v7.0.99 to
> v7.0.100. Since there are open security issues in v7.0.99 we are forced
> to do it promptly, however I have the feeling that we detected a major
> issue in v7.0.100.
Known issue (SCI support was broken) already fixed in 7.0.x for 7.0.101
onwards.
Mark
>
>
>
> We have a Faces-Application, based on org=”org.glassfish"
> name="javax.faces" rev="2.3.9”.
>
> It seems that v7.0.100 does not load the FacesInitializer, declared in
> /META-INF/services/javax.servlet.ServletContainerInitializer, whereas
> v7.0.99 does.
>
> The FacesInitializer initializes, e.g. classes annotated with
> @FacesConverter or @FacesValidator, which won’t be available any more.
>
>
>
> It seems related with the following entries in the changelog:
>
>
>
>
>
> fix
>
>
>
> 64021 <https://bz.apache.org/bugzilla/show_bug.cgi?id=64021>: Ensure
> that container provided SCIs are always loaded before application
> provided SCIs. Note that where both the container and the application
> provide the same SCI, it is the application provided SCI that will be
> used. (markt)
>
> fix
>
>
>
> SCI definitions from JARs unpacked into |WEB-INF/classes|are now handled
> consistently and will always be found irrespective of whether the web
> application defines a JAR ordering or not. (markt)
>
>
>
>
>
> Our current workaround is, to copy the file
> /META-INF/services/javax.servlet.ServletContainerInitializer Into the
> WEB-INF/classes – Folder.
>
>
>
> Before filing this as a Bug Report, I would like to post it in this
> forum to get feedback. To demonstrate the issue, I provided a simple
> demonstration war-Project via a temporary download link:
> http://server.arctis.at/tmp/ProblemDemoProject.war
>
>
>
> Depending on your installation, the call to
> https://localhost:8443/ProblemDemoProject/ should return in v7.0.99
> something like
>
> Startvalue: Hello World
>
> Converted value: HELLO WORLD (converted by DemoConverter
>
>
>
> With v7.0.100 it returns
>
>
>
> An Error Occurred:
>
>
>
> Ausdrucksfehler: Benanntes Objekt demoConverter nicht gefunden.
>
> (sorry German localization: should read expression error: named object
> demoConverter not found)
>
>
>
> …
>
>
>
> 04.03.2020 08:51:07 - Generated by Mojarra/Facelets
>
>
>
> Feedback welcome.
>
>
>
> As an addendum: Meanwhile I have detected
> https://bz.apache.org/bugzilla/show_bug.cgi?id=64191 .
>
> I’m pretty sure that the problem is related with it. Just use my demo
> web application for an regression test 😊.
>
>
>
> Michael
>
>
>
> Dr. Michael Breu
>
> Michael.Breu@arctis.at
> <ma...@qe-lab.com> Tel. +43
> 676 3439918
>
> arctis Softwaretechnologie GmbH, GF. Dr. Michael Breu
>
> 6401 Inzing, Jägerweg 2 Firmenbuch FN 230395 t
>
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org