[QPID-6791] Unsafe usage of WeakHashMap in ACL module can cause the broker to dead lock

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 0.17, 0.32
• Fix Version/s: qpid-java-6.0
• Component/s: Broker-J
• Labels: ACL
• Assignee: Unassigned
• Reporter: Lorenz Quack
• Created: 15/Oct/15 09:48
• Updated: 15/Oct/15 12:30
• Resolved: 15/Oct/15 12:30

Description

org.apache.qpid.server.security.access.config.RuleSet uses WeakHashMap in a multi-threaded environment. However, WeakHasMap is not thread-safe. This can cause the broker to dead lock.

This problem can affect only users utilising ACLs.