4.2K Star 24.1K Fork 7K

GVP铭飞 / MCMS

 / 详情

5.3.0版本后台一旦报错后,整个服务就崩了。所有请求都是500

已完成
创建于  
2023-02-07 16:16

2023-02-07 16:07:42.696 [DEBUG] 25464 [nio-8080-exec-6 ] net.mingsoft.basic.exception.ErrorController:61 : errorhtml log meseeage:null,url:/
2023-02-07 16:07:42.842 [ERROR] 25464 [nio-8080-exec-7 ] org.apache.catalina.core.ContainerBase.[Tomcat].[localhost].[/].[dispatcherServlet]:175 : Servlet.service() for servlet [dispatcherServlet] in context with path [] threw exception

java.lang.ArrayIndexOutOfBoundsException: 10
at java.util.ArrayList.clear(ArrayList.java:564) ~[?:1.8.0_321]
at net.mingsoft.basic.filter.XssHttpServletRequestWrapper.(XssHttpServletRequestWrapper.java:51) ~[ms-basic-2.1.18.1.jar:2.1.18.1]
at net.mingsoft.basic.filter.XSSEscapeFilter.doFilter(XSSEscapeFilter.java:62) ~[ms-basic-2.1.18.1.jar:2.1.18.1]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:177) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:97) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:541) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:135) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:78) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:360) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:399) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:891) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1784) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at java.lang.Thread.run(Thread.java:750) ~[?:1.8.0_321]

2023-02-07 16:07:42.843 [DEBUG] 25464 [nio-8080-exec-7 ] net.mingsoft.basic.exception.ErrorController:61 : errorhtml log meseeage:null,url:/
2023-02-07 16:07:42.986 [ERROR] 25464 [io-8080-exec-10 ] org.apache.catalina.core.ContainerBase.[Tomcat].[localhost].[/].[dispatcherServlet]:175 : Servlet.service() for servlet [dispatcherServlet] in context with path [] threw exception

java.lang.ArrayIndexOutOfBoundsException: 10
at java.util.ArrayList.clear(ArrayList.java:564) ~[?:1.8.0_321]
at net.mingsoft.basic.filter.XssHttpServletRequestWrapper.(XssHttpServletRequestWrapper.java:51) ~[ms-basic-2.1.18.1.jar:2.1.18.1]
at net.mingsoft.basic.filter.XSSEscapeFilter.doFilter(XSSEscapeFilter.java:62) ~[ms-basic-2.1.18.1.jar:2.1.18.1]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:177) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:97) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:541) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:135) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:78) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:360) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:399) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:891) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1784) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) ~[tomcat-embed-core-9.0.70.jar:9.0.70]
at java.lang.Thread.run(Thread.java:750) ~[?:1.8.0_321]

2023-02-07 16:07:42.988 [DEBUG] 25464 [io-8080-exec-10 ] net.mingsoft.basic.exception.ErrorController:61 : errorhtml log meseeage:null,url:/

评论 (7)

许强 创建了任务

感谢对开源产品的关注,需要的话可以在技术群让技术远程看一下

好的。我这边也定位了一下,发现问题在XssHttpServletRequestWrapper这个类,当报错之后,对后续的请求进行拦截时excludesFiled数组的clear方法会报数组越界的错误。能否将这个变量从类变量改为实例变量呢,这样每次也不用清理了。输入图片说明

铭飞 任务状态待办的 修改为进行中
铭飞 里程碑设置为5.3.0

感谢对开源产品的关注,同步一下最新的代码仓库这块代码已经临时修复过

嗯嗯。好的

是怎么修复的?我看5.3.0最新版的依然存在线程安全问题,还是会导致异常

大佬们,这个问题在哪个版本里有修复?

感谢对开源产品的关注,新版本已发布!如果还有问题可以直接联系QQ群技术人员。

铭飞 任务状态进行中 修改为已完成
铭飞 里程碑5.3.0 修改为5.3.1

登录 后才可以发表评论

状态
负责人
里程碑
Pull Requests
关联的 Pull Requests 被合并后可能会关闭此 issue
分支
开始日期   -   截止日期
-
置顶选项
优先级
参与者(4)
542665 mingsoft 1714360870 436247 cyx.net 1578923812
Java
1
https://gitee.com/mingSoft/MCMS.git
git@gitee.com:mingSoft/MCMS.git
mingSoft
MCMS
MCMS

搜索帮助

344bd9b3 5694891 D2dac590 5694891