0006487: ArrayList race condition in Session.invalidate()

Viewing Issue Simple Details [ Jump to Notes ]

[ View Advanced ] [ Issue History ] [ Print ]

Category

Severity

Reproducibility

Date Submitted

Last Update

0006487

[Resin]

major

always

08-15-23 19:06

11-10-23 07:15

Reporter

nam

View Status

public

Assigned To

Priority

high

Resolution

open

Status

new

Product Version

4.0.66

Summary

0006487: ArrayList race condition in Session.invalidate()

Description

(rep by M. Shimomura)

java.lang.ArrayIndexOutOfBoundsException: Index 16 out of bounds for length 15
   at java.base/java.util.ArrayList.add(ArrayList.java:487)
   at java.base/java.util.ArrayList.add(ArrayList.java:499)
   at com.caucho.config.inject.InjectManager.getWebComponent(InjectManager.java:1769)
   at com.caucho.config.inject.InjectManager.resolveRec(InjectManager.java:1617)
   at com.caucho.config.inject.InjectManager.resolve(InjectManager.java:1607)
   at com.caucho.config.inject.InjectManager.getBeans(InjectManager.java:1553)
   at com.caucho.config.inject.InstanceImpl.getBeanSet(InstanceImpl.java:154)
   at com.caucho.config.inject.InstanceImpl.isUnsatisfied(InstanceImpl.java:148)
   at com.caucho.security.AbstractLogin.getAuthenticator(AbstractLogin.java:122)
   at com.caucho.security.AbstractLogin.getSingleSignon(AbstractLogin.java:140)
   at com.caucho.security.AbstractLogin.sessionInvalidate(AbstractLogin.java:578)
   at com.caucho.server.session.SessionImpl.invalidate(SessionImpl.java:1284)
   at com.caucho.server.session.SessionImpl.invalidate(SessionImpl.java:1126)

Additional Information

Attached Files

Relationships

There are no notes attached to this issue.

Issue History
Date Modified	Username	Field	Change
08-15-23 19:06	nam	New Issue
11-10-23 07:15	RustyGroves	Note Added: 0007332
11-10-23 07:16	RustyGroves	Note Edited: 0007332
11-10-23 07:16	RustyGroves	Note Edited: 0007332
11-10-23 07:17	RustyGroves	Note Deleted: 0007332

Mantis 1.0.0rc3[^]

31 total queries executed.
25 unique queries executed.