[SLING-12421] Race between serving request and destroying JspServletWrapper

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: Scripting JSP 2.6.2
• Fix Version/s: Scripting JSP 2.6.4
• Component/s: Scripting
• Assignee: Julian Sedding
• Reporter: Julian Sedding
• Created: 05/Sep/24 13:44
• Updated: 18/Sep/24 12:25
• Resolved: 18/Sep/24 12:25

Description

When a JspServletWrapper is destroyed, it is possible that a request is still being served concurrently. This can lead to a NullPointerException if the internal field theServlet is already set to null by the time it's service() method is called.

To fix this, theServlet should be copied to a local field at the beginning of the JspServletWrapper#service() method.

Issue Links

• links to: GitHub Pull Request #9