Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-5995

DebugImpl uses unsychronized SimpleDateFormat for timestamps

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 12.0.0, 13.0.0
    • Fix Version/s: 12.0.3, 13.0.0
    • Component/s: audit logging
    • Labels:
    • Sprint:
      AM Sustaining Sprint 13

      Description

      com.sun.identity.shared.debug.impl.DebugImpl uses a shared SimpleDateFormat field (dateFormat) for formatting timestamps. As DebugImpl instances are shared between threads and SimpleDateFormat is not thread-safe, this could result in erroneous time-stamps being recorded as subsequent log operations may overwrite internal state during formatting.

      Either a fresh SimpleDateFormat should be created each time, or a thread-local copy, or access should be synchronized to prevent errors.

        Attachments

          Activity

            People

            • Assignee:
              quentin.castel Quentin CASTEL [X] (Inactive)
              Reporter:
              neil.madden Neil Madden
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: