You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@commons.apache.org by "Shinya Nishinaka (JIRA)" <ji...@apache.org> on 2012/11/29 11:50:59 UTC
[jira] [Commented] (FILEUPLOAD-189) DiskFileItemFactory use of
FileCleaningTracker is documated or coded wrong
[ https://issues.apache.org/jira/browse/FILEUPLOAD-189?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13506382#comment-13506382 ]
Shinya Nishinaka commented on FILEUPLOAD-189:
---------------------------------------------
I think this issue Critical , too.
If the lifecycle of DiskFileItemFactory object is shorter than DiskFileItem, There is a possibility that the temporary files are deleted before DiskFileItem#getInputStream() is called.
This causes upload files will be lost.
> DiskFileItemFactory use of FileCleaningTracker is documated or coded wrong
> --------------------------------------------------------------------------
>
> Key: FILEUPLOAD-189
> URL: https://issues.apache.org/jira/browse/FILEUPLOAD-189
> Project: Commons FileUpload
> Issue Type: Bug
> Reporter: Gregor K
> Priority: Minor
> Attachments: FILEUPLOAD-189.patch
>
> Original Estimate: 1h
> Remaining Estimate: 1h
>
> Regarding latest SVN revision:
> The DiskFileItemFactory documents:
> Temporary files are automatically deleted as soon as they are no longer needed. (More precisely, when the corresponding instance of {@link java.io.File} is garbage collected.)
> But the code in DiskFileItemFactory.createItem() is doing:
> tracker.track(result.getTempFile(), this);
> Which means the file is cleaned when DiskFileItemFactory is garbage collected.
> This error is propably introduced in Rev 578253 when the code was moved from DiskFileItem to DiskFileItemFactory, without changing "this" (which was DiskFileItem) and is not DiskFileItemFactory.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira