Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-64465

Race condition on setSecurityRealm

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Major
    • Resolution: Fixed
    • Component/s: core
    • Labels:
      None
    • Similar Issues:
    • Released As:
      2.272

      Description

      If Jenkins#setSecurityRealm is called concurrently from multiple threads there is a potential race condition on the authentication filters registration.

      Jenkins#setSecurityRealm calls filter.reset(), HudsonFilter#reset is not synchronized however it is replacing the old filter with the new filter (if there was one) which is not thread a thread safe operation.

      The effect of this race condition is the wrong auth filter being registered.

        Attachments

          Activity

            People

            Assignee:
            amuniz Antonio Muñiz
            Reporter:
            amuniz Antonio Muñiz
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: