jetty-dev http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html jetty-dev en-us Tue, 22 May 2012 19:40:25 GMT Tue, 22 May 2012 19:40:25 GMT http://blogs.law.harvard.edu/tech/rss MHonArc RSS 2.0 RCFile webmaster@eclipse.org (Webmaster) webmaster@eclipse.org (Webmaster) jetty-dev http://www.eclipse.org/eclipse.org-common/themes/Phoenix/images/eclipse_home_header.jpg http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html Re: [jetty-dev] Potential DOS vulnerability in jetty-7.6.3 http://dev.eclipse.org/mhonarc/lists/jetty-dev/msg01363.html This appears to be a problem added in 7.6.0 with the half close handling - once the buffer is full we can't complete the half close.

A fix has been committed to head and we are currently building 7.6.4

regards


On 22 May 2012 04:56, Benjamin Gordon <benjamin.gordon@xxxxxxxxxxx> wrote:
Hello-
Our security scanner exposed a DOS vulnerability in jetty-distribution-7.6.3.v20120416, where a netcat the following file to port 8080 causes the server to go into an infinite loop. (No servlets are deployed, fresh jetty install.)
The steps to reproduce are simply to run the following command with the attached file. This file contains the letter 'A' 6480 times. Piping this through netcat directly to port 8080 causes infinite recursion, with the following warning:
WARN:oejh.HttpParser:Full [835845122,-1,m=0,g=6144,p=6144,c=6144]

cat test.txt |nc 127.0.0.1 8080


After looking at the code, it appears as if there may be a bug in HttpParser.java when the _header buffer / view is full. 
An HttpException exception (413, full head) is thrown/caught, while _state == STATE_FIELD0, as the call to fill() throws. 
At this point the default block of the case statement in parseNext() sets state to STATE_END, and _handler.earlyEOF() which is a no-op is called. 
The exception is propagated to the caller and the infinite loop begins. HttpParser.fill() will constantly be called with the full buffer.

The finally block in AsyncHttpConnection.handle() gets called as expected, however, _parser.isComplete() will never be true as HttpParser's state is reset from STATE_END by the catch block to STATE_SEEKING_EOF. Also, progress does not get set to false as _request.getAsyncContinuation().isAsyncStarted() is in IDLE state. (This may be correct functionality, I am not sure.)
 
I can only guess that either the read buffer's mark is not getting correctly updated, or _handler.earlyEOF() should be updating state.
There are quite a few state machines, as expected with NIO, so I hope someone who is close to the code can come up with a patch quickly. 

I have spent about an hour looking at this, and would appreciate the help.

Thanks-
--ben 


_______________________________________________
jetty-dev mailing list
jetty-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/jetty-dev


]]> Tue, 22 May 2012 19:36:26 GMT http://dev.eclipse.org/mhonarc/lists/jetty-dev/msg01363.html gregw@xxxxxxx (Greg Wilkins) Re: [jetty-dev] Issues getting iJetty up and running with dependencies http://dev.eclipse.org/mhonarc/lists/jetty-dev/msg01362.html Hi David, Can you post the logcat output? I'd like to see the exact classes and stack trace line numbers. NB The cometd stuff will bring in dependencies on some of the jetty jars, which is normally not a problem, as the webapp classloader should make them visible, but maybe that's not working in android - seeing the stacktraces will help pinpoint. thanks, Jan On 22 May 2012 05:20, David Whittaker <dpwhittaker@xxxxxxxxx> wrote: > Hi, > > I'm trying to port the chat demo to iJetty3 and Cometd 2.4.2  I think I have > all the code updated for Cometd, but when I download and install the war > onto my phone, I get several class not found errors relating to the classes > contained in the cometd-java-server dependency.  I've got the jar unpacker > and dex steps in my maven build, and I see the classes in dex output, so I > know they are getting compiled into the classes.dex/zip.  I also see that > the classes.zip is placed under WEB-INF/lib.  I also see the dalvikvm > unzipping the classes.zip in the android log, immediately followed by all > the class not found errors.  I even did a dexdump on the classes.dex and > found the classes it was complaining about.  I'm really stumped here.  If > anyone can offer some clarification, that would be helpful.  Here's my pom, > if it helps: > > > <?xml version="1.0" encoding="UTF-8"?> > <project xmlns="http://maven.apache.org/POM/4.0.0"; > xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; > xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 > http://maven.apache.org/xsd/maven-4.0.0.xsd";> >     <parent> > <groupId>org.mortbay.ijetty</groupId> > <artifactId>example-webapps-parent</artifactId> > <version>3.2-SNAPSHOT</version> > <relativePath>../pom.xml</relativePath> >     </parent> > >     <modelVersion>4.0.0</modelVersion> >     <artifactId>chat</artifactId> >     <name>CometD Chat</name> >   <version>3.2-SNAPSHOT</version> >   <packaging>war</packaging> >   <url>http://maven.apache.org</url> >   <properties> > <cometd.version>2.4.2</cometd.version> >   </properties> > >     <dependencies> > <dependency> >  <groupId>com.google.android</groupId> >  <artifactId>android</artifactId> >  <version>${android.version}</version> >  <scope>provided</scope> > </dependency> >         <dependency> >             <groupId>org.slf4j</groupId> >             <artifactId>slf4j-android</artifactId> >             <version>1.6.1-RC1</version> >         </dependency> >         <dependency> >             <groupId>org.eclipse.jetty</groupId> >             <artifactId>jetty-servlet</artifactId> >             <version>${jetty.version}</version> >         </dependency> >         <dependency> >             <groupId>org.cometd.java</groupId> >             <artifactId>cometd-java-server</artifactId> >             <version>2.4.2</version> >         </dependency> >     </dependencies> >   <build> >     <plugins> >       <plugin> >         <groupId>org.apache.maven.plugins</groupId> >         <artifactId>maven-compiler-plugin</artifactId> >         <version>2.3.2</version> >         <configuration> >           <source>1.5</source> >           <target>1.5</target> >           <verbose>false</verbose> >         </configuration> >       </plugin> >       <plugin> >         <groupId>org.apache.maven.plugins</groupId> >         <artifactId>maven-dependency-plugin</artifactId> >         <version>2.3</version> >         <executions> >           <execution> >             <id>unpack-dependencies</id> >             <phase>generate-sources</phase> >             <goals> >               <goal>unpack-dependencies</goal> >             </goals> >             <configuration> > > <failOnMissingClassifierArtifact>false</failOnMissingClassifierArtifact> >               <excludeArtifactIds>servlet-api,android</excludeArtifactIds> >               <excludeTransitive>true</excludeTransitive> > > <outputDirectory>${project.build.directory}/generated-classes</outputDirectory> >             </configuration> >           </execution> >         </executions> >       </plugin> > >           <!-- Convert the compiled classes into a clases.dex. --> >       <plugin> >         <groupId>org.codehaus.mojo</groupId> >         <artifactId>exec-maven-plugin</artifactId> >         <version>1.2</version> >         <executions> >           <execution> >             <id>generate-dex</id> >             <phase>process-classes</phase> >             <goals> >               <goal>exec</goal> >             </goals> >             <configuration> >               <!-- > executable>${env.ANDROID_HOME}/platform-tools/dx</executable --> >               <executable>java</executable> >               <arguments> >                <!-- <argument>-JXmx1024M</argument> --> >                 <argument>-jar</argument> > > <argument>${env.ANDROID_HOME}/platform-tools/lib/dx.jar</argument> >                 <argument>--dex</argument> >                 <argument>--verbose</argument> >                 <argument>--core-library</argument> > > <argument>--output=${project.build.directory}/classes.dex</argument> >                 <argument>--positions=lines</argument> >                 <argument>${project.build.directory}/classes/</argument> > > <argument>${project.build.directory}/generated-classes/</argument> >               </arguments> >             </configuration> >           </execution> >         </executions> >       </plugin> >       <plugin> >         <artifactId>maven-antrun-plugin</artifactId> >         <version>1.6</version> >         <executions> >           <execution> >             <id>copydex</id> >             <phase>process-classes</phase> >             <goals> >               <goal>run</goal> >             </goals> >             <configuration> >               <tasks> >                 <mkdir > > dir="${project.build.directory}/${project.artifactId}-${project.version}/WEB-INF/lib" > /> >                 <jar >                   basedir="${project.build.directory}" >                   update="true" >                   includes="classes.dex" > > destfile="${project.build.directory}/${project.artifactId}-${project.version}/WEB-INF/lib/classes.zip" > /> >               </tasks> >             </configuration> >           </execution> >         </executions> >       </plugin> >     </plugins> >   </build> > > </project> > > > I know I'm probably missing something obvious.  If you see something, thanks > in advance for letting me know. > David Whittaker > > _______________________________________________ > jetty-dev mailing list > jetty-dev@xxxxxxxxxxx > https://dev.eclipse.org/mailman/listinfo/jetty-dev > ]]> Tue, 22 May 2012 08:09:16 GMT http://dev.eclipse.org/mhonarc/lists/jetty-dev/msg01362.html janb@xxxxxxx (Jan Bartel) [jetty-dev] Issues getting iJetty up and running with dependencies http://dev.eclipse.org/mhonarc/lists/jetty-dev/msg01361.html Hi,I&#39;m trying to port the chat demo to iJetty3 and Cometd 2.4.2 &#xA0;I think I have all the code updated for Cometd, but when I download and install the war onto my phone, I get several class not found errors relating to the classes contained in the cometd-jav...
I'm trying to port the chat demo to iJetty3 and Cometd 2.4.2  I think I have all the code updated for Cometd, but when I download and install the war onto my phone, I get several class not found errors relating to the classes contained in the cometd-java-server dependency.  I've got the jar unpacker and dex steps in my maven build, and I see the classes in dex output, so I know they are getting compiled into the classes.dex/zip.  I also see that the classes.zip is placed under WEB-INF/lib.  I also see the dalvikvm unzipping the classes.zip in the android log, immediately followed by all the class not found errors.  I even did a dexdump on the classes.dex and found the classes it was complaining about.  I'm really stumped here.  If anyone can offer some clarification, that would be helpful.  Here's my pom, if it helps:


<?xml version="1.0" encoding="UTF-8"?>
    <parent>
<groupId>org.mortbay.ijetty</groupId>
<artifactId>example-webapps-parent</artifactId>
<version>3.2-SNAPSHOT</version>
<relativePath>../pom.xml</relativePath>
    </parent>

    <modelVersion>4.0.0</modelVersion>
    <artifactId>chat</artifactId>
    <name>CometD Chat</name>
  <version>3.2-SNAPSHOT</version>
  <packaging>war</packaging>
  <properties>
<cometd.version>2.4.2</cometd.version>
  </properties>

    <dependencies>
<dependency>
 <groupId>com.google.android</groupId>
 <artifactId>android</artifactId>
 <version>${android.version}</version>
 <scope>provided</scope>
</dependency>
        <dependency>
            <groupId>org.slf4j</groupId>
            <artifactId>slf4j-android</artifactId>
            <version>1.6.1-RC1</version>
        </dependency>
        <dependency>
            <groupId>org.eclipse.jetty</groupId>
            <artifactId>jetty-servlet</artifactId>
            <version>${jetty.version}</version>
        </dependency>
        <dependency>
            <groupId>org.cometd.java</groupId>
            <artifactId>cometd-java-server</artifactId>
            <version>2.4.2</version>
        </dependency>
    </dependencies>
  <build>
    <plugins>
      <plugin>
        <groupId>org.apache.maven.plugins</groupId>
        <artifactId>maven-compiler-plugin</artifactId>
        <version>2.3.2</version>
        <configuration>
          <source>1.5</source>
          <target>1.5</target>
          <verbose>false</verbose>
        </configuration>
      </plugin>
      <plugin>
        <groupId>org.apache.maven.plugins</groupId>
        <artifactId>maven-dependency-plugin</artifactId>
        <version>2.3</version>
        <executions>
          <execution>
            <id>unpack-dependencies</id>
            <phase>generate-sources</phase>
            <goals>
              <goal>unpack-dependencies</goal>
            </goals>
            <configuration>
              <failOnMissingClassifierArtifact>false</failOnMissingClassifierArtifact>
              <excludeArtifactIds>servlet-api,android</excludeArtifactIds>
              <excludeTransitive>true</excludeTransitive>
              <outputDirectory>${project.build.directory}/generated-classes</outputDirectory>
            </configuration>
          </execution>
        </executions>
      </plugin>

          <!-- Convert the compiled classes into a clases.dex. -->
      <plugin>
        <groupId>org.codehaus.mojo</groupId>
        <artifactId>exec-maven-plugin</artifactId>
        <version>1.2</version>
        <executions>
          <execution>
            <id>generate-dex</id>
            <phase>process-classes</phase>
            <goals>
              <goal>exec</goal>
            </goals>
            <configuration>
              <!-- executable>${env.ANDROID_HOME}/platform-tools/dx</executable -->
              <executable>java</executable>
              <arguments>
               <!-- <argument>-JXmx1024M</argument> -->
                <argument>-jar</argument>
                <argument>${env.ANDROID_HOME}/platform-tools/lib/dx.jar</argument>
                <argument>--dex</argument>
                <argument>--verbose</argument>
                <argument>--core-library</argument>
                <argument>--output=${project.build.directory}/classes.dex</argument>
                <argument>--positions=lines</argument>
                <argument>${project.build.directory}/classes/</argument>
                <argument>${project.build.directory}/generated-classes/</argument>
              </arguments>
            </configuration>
          </execution>
        </executions>
      </plugin>
      <plugin>
        <artifactId>maven-antrun-plugin</artifactId>
        <version>1.6</version>
        <executions>
          <execution>
            <id>copydex</id>
            <phase>process-classes</phase>
            <goals>
              <goal>run</goal>
            </goals>
            <configuration>
              <tasks>
                <mkdir
                  dir="${project.build.directory}/${project.artifactId}-${project.version}/WEB-INF/lib" />
                <jar
                  basedir="${project.build.directory}"
                  update="true"
                  includes="classes.dex"
                  destfile="${project.build.directory}/${project.artifactId}-${project.version}/WEB-INF/lib/classes.zip" />
              </tasks>
            </configuration>
          </execution>
        </executions>
      </plugin>
    </plugins>
  </build>

</project>


I know I'm probably missing something obvious.  If you see something, thanks in advance for letting me know.
David Whittaker
]]> Tue, 22 May 2012 03:20:46 GMT http://dev.eclipse.org/mhonarc/lists/jetty-dev/msg01361.html dpwhittaker@xxxxxxx (David Whittaker) [jetty-dev] Potential DOS vulnerability in jetty-7.6.3 http://dev.eclipse.org/mhonarc/lists/jetty-dev/msg01360.html Hello- Our security scanner exposed a DOS vulnerability in jetty-distribution-7.6.3.v20120416, where a netcat the following file to port 8080 causes the server to go into an infinite loop. (No servlets are deployed, fresh jetty install.) The steps to repr...
Hello-
Our security scanner exposed a DOS vulnerability in jetty-distribution-7.6.3.v20120416, where a netcat the following file to port 8080 causes the server to go into an infinite loop. (No servlets are deployed, fresh jetty install.)
The steps to reproduce are simply to run the following command with the attached file. This file contains the letter 'A' 6480 times. Piping this through netcat directly to port 8080 causes infinite recursion, with the following warning:
WARN:oejh.HttpParser:Full [835845122,-1,m=0,g=6144,p=6144,c=6144]

cat test.txt |nc 127.0.0.1 8080


After looking at the code, it appears as if there may be a bug in HttpParser.java when the _header buffer / view is full. 
An HttpException exception (413, full head) is thrown/caught, while _state == STATE_FIELD0, as the call to fill() throws. 
At this point the default block of the case statement in parseNext() sets state to STATE_END, and _handler.earlyEOF() which is a no-op is called. 
The exception is propagated to the caller and the infinite loop begins. HttpParser.fill() will constantly be called with the full buffer.

The finally block in AsyncHttpConnection.handle() gets called as expected, however, _parser.isComplete() will never be true as HttpParser's state is reset from STATE_END by the catch block to STATE_SEEKING_EOF. Also, progress does not get set to false as _request.getAsyncContinuation().isAsyncStarted() is in IDLE state. (This may be correct functionality, I am not sure.)
 
I can only guess that either the read buffer's mark is not getting correctly updated, or _handler.earlyEOF() should be updating state.
There are quite a few state machines, as expected with NIO, so I hope someone who is close to the code can come up with a patch quickly. 

I have spent about an hour looking at this, and would appreciate the help.

Thanks-
--ben 

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
]]> Tue, 22 May 2012 02:56:47 GMT http://dev.eclipse.org/mhonarc/lists/jetty-dev/msg01360.html benjamin.gordon@xxxxxxx (Benjamin Gordon) Re: [jetty-dev] jetty 8.1.4 http://dev.eclipse.org/mhonarc/lists/jetty-dev/msg01359.html _______________________________________________ jetty-dev mailing list jetty-dev@xxxxxxxxxxx https://dev.eclipse.org/mailman/listinfo/jetty-dev Thanks alot you saved my day :-) -----UrsprÃngliche Nachricht----- Von: jetty-dev-bounces@xxxxxxxxxxx [mailto:jetty-dev-bounces@xxxxxxxxxxx] Im Auftrag von Jesse McConnell Gesendet: Freitag, 11. Mai 2012 15:09 An: Jetty @ Eclipse developer discussion list Betreff: Re: [jetty-dev] jetty 8.1.4 https://oss.sonatype.org/content/groups/jetty/org/eclipse/jetty/jetty-distribution/ we publish nightly snapshots there likely release for 8.1.4 is in the next few weeks cheers, jesse -- jesse mcconnell jesse.mcconnell@xxxxxxxxx On Fri, May 11, 2012 at 7:58 AM, Paul-Robert KÃstner <paul-robert.kaestner@xxxxxxx> wrote: > Hello, > > > > I wanted to ask, when the jetty 8.1.4 is likely to be released, or > whether there is a snapshot repository available. > > > > Thanks, > > > > Paul-Robert Kaestner > > > > > _______________________________________________ > jetty-dev mailing list > jetty-dev@xxxxxxxxxxx > https://dev.eclipse.org/mailman/listinfo/jetty-dev > _______________________________________________ jetty-dev mailing list jetty-dev@xxxxxxxxxxx https://dev.eclipse.org/mailman/listinfo/jetty-dev ]]> Fri, 11 May 2012 13:11:01 GMT http://dev.eclipse.org/mhonarc/lists/jetty-dev/msg01359.html paul-robert.kaestner@xxxxxxx (Paul-Robert KÃstner) Re: [jetty-dev] jetty 8.1.4 http://dev.eclipse.org/mhonarc/lists/jetty-dev/msg01358.html https://oss.sonatype.org/content/groups/jetty/org/eclipse/jetty/jetty-distribution/ we publish nightly snapshots there likely release for 8.1.4 is in the next few weeks cheers, jesse -- jesse mcconnell jesse.mcconnell@xxxxxxxxx On Fri, May 11, 2012 at 7:58 AM, Paul-Robert KÃstner <paul-robert.kaestner@xxxxxxx> wrote: > Hello, > > > > I wanted to ask, when the jetty 8.1.4 is likely to be released, or whether > there is a snapshot repository available. > > > > Thanks, > > > > Paul-Robert Kaestner > > > > > _______________________________________________ > jetty-dev mailing list > jetty-dev@xxxxxxxxxxx > https://dev.eclipse.org/mailman/listinfo/jetty-dev > ]]> Fri, 11 May 2012 13:09:00 GMT http://dev.eclipse.org/mhonarc/lists/jetty-dev/msg01358.html jesse.mcconnell@xxxxxxx (Jesse McConnell) [jetty-dev] jetty 8.1.4 http://dev.eclipse.org/mhonarc/lists/jetty-dev/msg01357.html Hello, I wanted to ask, when the jetty 8.1.4 is likely to be released, or whether there is a snapshot repository available. Thanks, Paul-Robert Kaestner

Hello,

 

I wanted to ask, when the jetty 8.1.4 is likely to be released, or whether there is a snapshot repository available.

 

Thanks,

 

Paul-Robert Kaestner

 

]]> Fri, 11 May 2012 13:01:48 GMT http://dev.eclipse.org/mhonarc/lists/jetty-dev/msg01357.html paul-robert.kaestner@xxxxxxx (Paul-Robert Kästner) [jetty-dev] Project meta data is out of date for rt.jetty http://dev.eclipse.org/mhonarc/lists/jetty-dev/msg01356.html Greg, Jan, Projects are required to keep meta data up to date using the MyFoundation Portal (http://portal.eclipse.org/). The following problems were found with this project's meta-data: * The date for release &quot;jetty-7.6.3&quot; is in the past, but the release ... Greg, Jan, Projects are required to keep meta data up to date using the MyFoundation Portal (http://portal.eclipse.org/). The following problems were found with this project's meta-data: * The date for release "jetty-7.6.3" is in the past, but the release is not marked as completed. If it is completed, it should be marked as completed; if it has been postponed, it should be given a new target date. * There is no next/future release of this project. All Eclipse projects must have a "next release" planned and scheduled. ]]> Sat, 05 May 2012 04:00:18 GMT http://dev.eclipse.org/mhonarc/lists/jetty-dev/msg01356.html emo@xxxxxxx (portal on behalf of emo) Re: [jetty-dev] Jetty SPDY push strategies http://dev.eclipse.org/mhonarc/lists/jetty-dev/msg01355.html i would recommend hopping on irc with them and chatting irc.freenode.net #jetty they are tbecker and sbordet cheers, jesse -- jesse mcconnell jesse.mcconnell@xxxxxxxxx On Fri, May 4, 2012 at 11:09 AM, Martin Bartlett <martin.j.bartlett@xxxxxxxxx> wrote: > Referer header : clever! The list scheme idea comes from the SPDY book and > the node.js implementation of push. > > Lemme know when something is testable -Â I'd love to help out! > > Martin > > On May 4, 2012 6:00 PM, <jetty-dev-request@xxxxxxxxxxx> wrote: > > _______________________________________________ > jetty-dev mailing list > jetty-dev@xxxxxxxxxxx > https://dev.eclipse.org/mailman/listinfo/jetty-dev > ]]> Fri, 04 May 2012 16:17:27 GMT http://dev.eclipse.org/mhonarc/lists/jetty-dev/msg01355.html jesse.mcconnell@xxxxxxx (Jesse McConnell) Re: [jetty-dev] Jetty SPDY push strategies http://dev.eclipse.org/mhonarc/lists/jetty-dev/msg01354.html Referer header : clever! The list scheme idea comes from the SPDY book and the node.js implementation of push.

Lemme know when something is testable -  I'd love to help out!

Martin

On May 4, 2012 6:00 PM, <jetty-dev-request@xxxxxxxxxxx> wrote:
]]> Fri, 04 May 2012 16:09:46 GMT http://dev.eclipse.org/mhonarc/lists/jetty-dev/msg01354.html martin.j.bartlett@xxxxxxx (Martin Bartlett)