irongate crashes lucee SEVERE [ajp-nio-8009-exec-678] … ThreadDeath

Description

It's old software but it shouldn't be crashing lucee

https://dev.lucee.org/t/severe-ajp-nio-8009-exec-678-threaddeath/5325

https://bitbucket.org/cflove/irongate-coldfusion-exception-manager/issues/1/lucee-5-and-irongate-error

quote

We recently upgraded our servers to Lucee 5 and ran into an issue with the irongate.cfm file. This is to let you know that you might want to have two different versions of the irongate.cfm file depending on the platform it will be used on.

On line 560 there is this code

That had to be commented out because it was crashing the server causing errors upon itself.

Environment

None

Activity

Show:
Zac Spitzer
March 29, 2019, 4:59 PM

i tried this and could reproduce the problem with Lucee 5.3.2.63-SNAPSHOT, commenting out the lines above worked

the logs fill up with repeated instances like

https://docs.lucee.org/reference/functions/getmetricdata.html

Zac Spitzer
March 29, 2019, 5:10 PM

if I change that line above to

this happens

Zac Spitzer
March 29, 2019, 5:34 PM
Edited

it just keeps looping, I set requesttimeout to 5s but it made no difference

there is even a <cfsetting requesttimeout="2"> at line 79, so kept investigating

something is triggering the request over and over again

I logged out the user agent, it's Lucee calling itself with a HEAD request???

Zac Spitzer
March 29, 2019, 5:48 PM
Edited

seems it's a URL being passed into isPDFObject which is then being evaluated....?

https://github.com/lucee/extension-pdf/blob/master/source/java/src/org/lucee/extension/pdf/util/PDFUtil.java#L308

Assignee

Unassigned

Reporter

Zac Spitzer

Priority

Major

Labels

None

Fix versions

None

Affects versions

Configure