Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-23303

Insufficient protection against stack overflows

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Major
    • None
    • 16.10.0
    • Old Core
    • None
    • Unknown

    Description

      Steps to reproduce:

      Create a page with the following content:

      {{velocity}}
      {{html clean="false"}}$doc.getRenderedContent(){{/html}}
      {{/velocity}}
      

      Expected result:

      An error related to the nested displaying of the page is displayed.

      Actual result:

      A java.lang.StackOverflowError is triggered:

      StackOverflowError might lead to unreleased locks and we found that following stack overflows, on some XWiki installations we got org.infinispan.util.concurrent.TimeoutException: ISPN000299: Unable to acquire lock after 10 seconds for key… persistently for some keys in several caches. This seemed to affect primarily keys that were set in requests in which the stack overflow occurred. Note that we're currently not really careful when handling stack overflow errors and we might call additional methods like the error displayer in the macro transformation with an almost full stack, leading to further stack overflow errors. This seems to be a likely root cause of XWIKI-23220.

      Attachments

        Activity

          People

            Unassigned Unassigned
            MichaelHamann Michael Hamann
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: