DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://issues.apache.org/bugzilla/show_bug.cgi?id=36541>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=36541 ------- Additional Comments From [EMAIL PROTECTED] 2005-09-14 05:24 ------- (In reply to comment #75) > (In reply to comment #73) > > The great thing about the ASF is its open source and you can fix it yourself. > I > would prefer it fixed in Tomcat, but I think your rant, Wade, at a Tomcat > developer isn't going to make that more likely - this is a volunteer > organization. > > I've created a patch, based on Craig's idea (see comment#21), that can > be "plugged" in for Tomcat 5.0.x which creates "thread safe" sessions - > available <a > href="http://www.niallp.pwp.blueyonder.co.uk/TomcatBug36541.html";>here</a> That is the great thing about open source software. Unfortunately I didn't write comment #73. It certainly is a volunteer organization. I have tried to help and give advice on the Tomcat list for years. I have even tried to help out with a few open source projects with some of my own time: iReport on sourceforge.net is one of them. When I work on any open source project I accept others critism and am conscious of the fact that I did not write all of the source code in the project nor am I the only person using and relying on the software. I am also aware that because an issue isn't affecting me directly it doesn't mean it isn't an issue, and these types of problems require being looked into when clear and relevant evidence is provided to display a real and valid problem exists. The last paragraph is written becuase, I have not been bitten by this specific bug as of yet. I saw the issue come across the Tomcat users list. I then evaluated the situation. As I was evaluating the situation I noticed that while I didn't see how an infinite loop could occur I definitely could see an issue because not synchronizing the reads can allow incorrect returns from a call to getAttribute (null when the key clearly points to a relevant value) and the while loop can be entered and iterated over a different number of times before returning. I even went as far to take java.util.HashMap, copy it into it's own class so I could access it's internals from code, then wrote tests to validate what I thought could happen. I then noticed areas in the Tomcat source code which are accessing the session which are not synchronized which developers can not directly synchronize. So, clearly there is a real issue which needs to be addressed a the release level. A patch is fine, and thank you for it, but it doesn't solve the scenario where a new user who doesn't know about this issue, the patch, or anything else associated with it downloads and installs Tomcat. So, when they run into it we'll have this same thing over and over again until it's fixed. I have a feeling it's being worked on though. Also, I think some of the more hateful comments could have been avoided had there not been antagonizing language used by certain folks. If you will notice the comment you are referring to posted by another user, they seem agitated by some of the responses to the issue. So, yes it's a volunteer organization, and ASF should be respected by both users and developers alike. It should be considered a privilege to be allowed to be a commiter here IMO. I have always felt that way about anything I have been able to be a part even when I may feel like debating an issue or getting a little heated. So, I have written what I just wrote. I would like to send a sincere thank you to all of the Apache developers for their efforts and time: no hard feelings from me. Really, I have worked in this business long enough to have been in heated debates time and time again with co-workers and fellow developers about programming issues. Sorry for the confusion, and I want to reiterate another frustrated individual besides myself wrote comment #73. I don't want to argue. I just want to contribute to software, and make it the best it can be, and certainly as good as it should be. So, I'll continue to point out things I see as issues, and try to grin and bear it when they get pointed out to me. -- Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
