Affects Version/s: 2.7
Fix Version/s: None
In class org.apache.xml.utils.XMLReaderManager
getXMLReader() method creates a new XMLReader (i.e. SAXParser) and stores it into ThreadLocal.
releaseXMLReader() does not remove (set to null) ThreadLocal thus creating a permanent leak.
Unfortunately the size of the cached Reader is typically dependent upon the size of the XML document you process (depends on implementation but this is the case with xerces SAXParser). In heavy load server environments with thread pools of tens and hundreds of threads the server sustains a significant memory leak (hundreds of megabytes - depending on the XML document sizes and number of threads in a thread pools).
A fix is trivial:
Put the following line at the end of releaseXMLReader method:
I wonder, why is reader stored in ThreadLocal in the first place?