DO NOT REPLY [Bug 37442] New: - JK Connector Session Desynchronisation

[bu...@apache.org]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=37442>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=37442

           Summary: JK Connector Session Desynchronisation
           Product: Tomcat 4
           Version: 4.1.27
          Platform: Other
        OS/Version: other
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: Connector:JK/AJP
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: frederic.grumiaux@gmail.com


I've add a case of session mix on my web server. One user got information 
about another session. I suspect that mod_jk got somehow desynchronised and 
sent a response from an older request. Here is my configuration:

Tomcat 4.1.27

mod_jk 1.2.5 (Build 29/09/03, could be a beta version)

apache 2.0.47

I know these versions are obsolete and should be upgraded. Unfortunately, this 
won't be possible if I do not find a proof that they might be involved in the 
session mix.

I found the following related issues:

http://issues.apache.org/bugzilla/show_bug.cgi?id=14282 
http://issues.apache.org/bugzilla/show_bug.cgi?id=16705 

but they do not match the installed versions. I've been searching for days but 
did not find anything else.

Are you aware of any case of desynchronisation of the Apache - Tomcat 
connection that would match these versions?

PS: 

the problem might be connected to the following exception:

java.lang.ArrayIndexOutOfBoundsException: 12611
at org.apache.ajp.Ajp13Packet.peekInt(Ajp13Packet.java(Compiled Code))
at org.apache.ajp.Ajp13Packet.getInt(Ajp13Packet.java(Inlined Compiled Code)) 
at org.apache.ajp.Ajp13Packet.getMessageBytes(Ajp13Packet.java(Inlined 
Compiled Code))
at org.apache.ajp.RequestHandler.decodeRequest(RequestHandler.java(Compiled 
Code))
at org.apache.ajp.Ajp13.handleMessage(Ajp13.java (Compiled Code))
at org.apache.ajp.Ajp13.receiveNextRequest(Ajp13.java(Compiled Code))
at org.apache.ajp.tomcat4.Ajp13Processor.process(Ajp13Processor.java(Compiled 
Code))
at org.apache.ajp.tomcat4.Ajp13Processor.run (Ajp13Processor.java:585)
at java.lang.Thread.run(Thread.java:513)

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org