[WSS-614] org.apache.ws.security.transform.STRTransformProvider leak

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.6.19, 2.0.10, 2.1.10
• Component/s: WSS4J Core
• Labels: leak
• Environment: Java 1.8.0_131; JBoss EAP 6.4.1
• Assignee: Colm O hEigeartaigh
• Reporter: Leandro Quiroga
• Created: 24/Aug/17 18:14
• Updated: 02/Oct/17 12:24
• Resolved: 02/Oct/17 12:24

Description

A memory leak occur when undeploying a web application that uses WSS4J.

The org.apache.ws.security.transform.STRTransformProvider is appended to java.security.Security at initialization in org.apache.ws.security.WSSConfig.init() but never removed.

I've tested in wss4j-1.6.17 but I think it is the same in 1.6.19, 2.0.10 and 2.1.10.

I've attached a screenshot of Eclipse MAT showing the leak.

Issue Links

• links to: GitHub Pull Request #8