Re: [jacc-dev] EE 10 Platform TCK JACC test failures with Stack overflow

[arjan tijms <arjan.tijms@xxxxxxxxx>]

Hi,

I have to look at it, but the GlassFish code can be sensitive to stackoverflows indeed. It uses the global Policy, and after it sets a new Policy it installs the previous Policy to delegate to. After repeated redeploys this risks constantly setting the old version of itself as the previous policy. After thousands of redeploys this may become too much.

Maybe this vulnerability is triggered here? It's a shot in the dark, but may be worth looking into.

I also wonder why that happens in the platform tests but not in the standalone one.

Kind regards,

Arjan Tijms

On Wed, May 4, 2022 at 10:16 PM Scott Marlow <smarlow@xxxxxxxxxx> wrote:

Hi,

We are seeing 40 test failures with GlassFish 7 (nightly build) and the Platform TCK jacc tests which are summarized on [1][2].  Any ideas why the stackoverflow error is occurring?  Is that caused by an implementation bug?

The TCK results are at [3] with more details.

Scott

[1] https://github.com/eclipse-ee4j/jakartaee-tck/wiki/Jakarta-EE-10.0-TCK-results#date--2022-05-03
[2] https://gist.github.com/scottmarlow/67a2c64b88f8453a622931235c12ad4e
[3] https://ci.eclipse.org/jakartaee-tck/job/jakartaee-tck/job/master/1779/artifact/jacc-results.tar.gz

_______________________________________________
jacc-dev mailing list
jacc-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/jacc-dev