You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@shiro.apache.org by "Francois Papon (JIRA)" <ji...@apache.org> on 2019/02/21 07:14:00 UTC

[jira] [Created] (SHIRO-668) Catch unexpected errors which can lead to oom

Francois Papon created SHIRO-668:
------------------------------------

             Summary: Catch unexpected errors which can lead to oom
                 Key: SHIRO-668
                 URL: https://issues.apache.org/jira/browse/SHIRO-668
             Project: Shiro
          Issue Type: Improvement
            Reporter: Francois Papon
            Assignee: Francois Papon
             Fix For: 1.4.1


Unexpected errors in the "run" method of the validation ExecutorServiceSessionValidationScheduler can kill the validation thread an it will not be executed anymore (see [StackOverflow](https://stackoverflow.com/questions/6494557/why-does-a-scheduledexecutorservice-not-run-a-task-again-after-an-exception-is-t).) This can lead to OOM's through too much sessions and can be a security risk by never ending sessions.
Catching "Throwable" is not the cleanest solution but it garant that the thread will be executed in the future.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)