You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2009/09/01 10:58:44 UTC

DO NOT REPLY [Bug 47774] New: Illegal context class loader is used when HttpSessionListener is executed.

https://issues.apache.org/bugzilla/show_bug.cgi?id=47774

           Summary: Illegal context class loader is used when
                    HttpSessionListener is executed.
           Product: Tomcat 6
           Version: 6.0.20
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Catalina
        AssignedTo: dev@tomcat.apache.org
        ReportedBy: fujino.keiichi@oss.ntt.co.jp


--- Comment #0 from Keiichi Fujino <fu...@oss.ntt.co.jp> 2009-09-01 01:58:42 PDT ---
When HttpSessionListener is executed, illegal class loader is set to the
context classLoader.

I think that the problem is in CoyoteAdapter#parseSessionCookiesId method. 
JSESSION COOKIE is parsed in this method, and sessionId is set to the request. 

To check sessionId, Request#isRequestedSessionIdValid method is called in this
method. 
And, Session#isValid() might be called in Request#isRequestedSessionIdValid
method. 
However, the context class loader of a current thread is StandardClassLoader. 
It is not WebappClassLoader. 

For instance,
When the session has already passed session-timeout, 
Session#expire is executed.
At this time, the context class loader of the thread that executes
HttpSessionListenner#sessionDestroyed is StanderdClassLoader. 
This is not good. 
The context class loader of the thread that executes HttpSessionListenner
should be WebAppClassLoader. 


Best regards.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

DO NOT REPLY [Bug 47774] Illegal context class loader is used when HttpSessionListener is executed.

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=47774

Mark Thomas <ma...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED

--- Comment #2 from Mark Thomas <ma...@apache.org> 2010-01-14 02:04:05 GMT ---
The patch has been applied to 6.0.x and will be included in 6.0.23 onwards.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

DO NOT REPLY [Bug 47774] Illegal context class loader is used when HttpSessionListener is executed.

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=47774

Keiichi Fujino <kf...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|FIXED                       |

--- Comment #3 from Keiichi Fujino <kf...@apache.org> 2010-04-02 06:14:10 UTC ---
I reopned this bug.
This is not fixed against 5.5.x.
therefore, proposed for 5.5.x.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

DO NOT REPLY [Bug 47774] Illegal context class loader is used when HttpSessionListener is executed.

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=47774

--- Comment #1 from Mark Thomas <ma...@apache.org> 2009-12-14 15:03:43 GMT ---
This has been fixed in trunk and proposed for 6.0.x.

Thanks for the report.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

DO NOT REPLY [Bug 47774] Illegal context class loader is used when HttpSessionListener is executed.

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=47774

Keiichi Fujino <kf...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|REOPENED                    |RESOLVED
         Resolution|                            |FIXED

--- Comment #4 from Keiichi Fujino <kf...@apache.org> 2010-04-09 07:50:26 UTC ---
This fix applied to 5.5, will be in 5.5.30 onwards.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org