Bug 50189 - AJP connector sends GET BODY CHUNK when reading after response closed
Summary: AJP connector sends GET BODY CHUNK when reading after response closed
Status: RESOLVED FIXED
Alias: None
Product: Tomcat 5
Classification: Unclassified
Component: Connector:AJP (show other bugs)
Version: 5.5.23
Hardware: PC Linux
: P2 normal (vote)
Target Milestone: ---
Assignee: Tomcat Developers Mailing List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-10-31 23:27 UTC by James Roper
Modified: 2011-03-14 07:43 UTC (History)
1 user (show)



Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description James Roper 2010-10-31 23:27:02 UTC
If a servlet (probably incorrectly) closes the writer/outputstream of a response, and then attempts to read from the request, the AJP connector sends GET BODY CHUNK to the mod_jk worker.

This then starts a series of very confusing communication between the worker and tomcat.  The worker doesn't read it until it makes its next request.  After making its next request, it reads it, and then sends a response with 0 length.  At the same time, Tomcat responds to the request made by the worker with another GET BODY CHUNK, which the worker also responds with a message of 0 length.  Then the really weird thing happens, Tomcat replays the first request made by that worker.  At this point, based on what I'm looking at with tcpdump, I get too confused to work out exactly what is happening.
Comment 1 Rainer Jung 2010-11-01 07:42:48 UTC
Thanks for the report. Which version of mod_jk and which config are you using?
Comment 2 James Roper 2010-11-01 20:18:23 UTC
The version of mod_jk is 1.2.28 on CentOS 5.4.

If you are unable to reproduce this issue, let me know and I'll do more investigations to reproduce it on my side, I'll see if I can reproduce it on later versions of Tomcat and I'll attach tcpdump logs etc.  I haven't done that yet because the only logs and environment that I have handy are a production environment, and the logs contain sensitive information, but I'm hoping my description so far is adequate.
Comment 3 Clint Morgan 2010-11-10 14:22:58 UTC
I've also hit this issue in tomcat 6.0.26 and 7.0.4. This has been using an in-house version of the AJP client (webserver-side).

Our symptoms were the same, and we had been working around by disabling connection sharing across requests.

Following James' advice, I've removed the possibility for a servlet-side read from the request after the response has been closed. This has resolved the issue of us.
Comment 4 Mark Thomas 2011-02-18 11:25:39 UTC
Fixed in 7.0.x and will be included in 7.0.9.

An attempt to read from the request once the response has been will trigger an exception.

I'll also propose back-ports for 6.0.x and 5.5.x
Comment 5 Mark Thomas 2011-02-21 07:53:34 UTC
Fixed in 6.0.x and will be included in 6.0.33 onwards.
Comment 6 Mark Thomas 2011-03-14 07:43:44 UTC
This has been fixed in 5.5.x and will be included in 5.5.34 onwards.