Thanks to Jeff Ragsdale, we've finally been able to kill a longstanding bug that allows POST requests to interfere with each other. Symptoms include corrupted or aborted File and Image uploads, and stupid-log messages about "AttributeError: data" killing threads. The attached HTTPServer.py is valid for all Zope 2.2.x versions. I am posting the patched file for earlier Zope versions separately. PLEASE BACK UP <Zope>/ZServer/HTTPServer.py, then replace it with the attached file. Cheers, Evan @ digicool & 4-am
* Evan Simpson (evan@digicool.com) [001210 10:27]:
Thanks to Jeff Ragsdale, we've finally been able to kill a longstanding bug that allows POST requests to interfere with each other. Symptoms include corrupted or aborted File and Image uploads, and stupid-log messages about "AttributeError: data" killing threads.
The attached HTTPServer.py is valid for all Zope 2.2.x versions. I am posting the patched file for earlier Zope versions separately.
Will these be released as Hotfixes? Or just new versions? Or is this it? Ciao! -- Little children, keep yourselves from idols -- St John, Ist century The Doctor What: Un-Humble http://docwhat.gerf.org/ docwhat@gerf.org KF6VNC
From: The Doctor What <docwhat@gerf.org>
Will these be released as Hotfixes? Or just new versions? Or is this it?
Hotfixes are pretty much reserved for critical security holes. Zope 2.3 (and possibly an interim 2.2.5 release) and above will have the fix. Fortunately, HTTPServer has had *very* few changes that would render newer versions incompatible with older Zopes, so I didn't have to go with a Windows-unfriendly patch file, and only needed two replacement files. So, yes, this is it. Cheers, Evan @ digicool & 4-am
The attached HTTPServer.py is valid for all Zope 2.2.x versions. I am posting the patched file for earlier Zope versions separately.
Will these be released as Hotfixes? Or just new versions? Or is this it?
I'll be building a 2.2.5 (hopefully by the end of the week) that will have that fix, plus the fix for the recent security issue. It will also have a fix for a memory leak that affects column name aliasing in some SQLMethod results (working that one now). Brian Lloyd brian@digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com
participants (4)
-
Brian Lloyd -
Evan Simpson -
Evan Simpson -
The Doctor What