tracker issue : CF-4203526

select a category, or use search below
(searches all categories and all time range)
Title:

ColdFusion uses invalid attribute, packetSize, in Tomcat HTTP connector settings

| View in Tracker

Status/Resolution/Reason: Open//

Reporter/Name(from Bugbase): A. Bakia / ()

Created: 11/26/2018

Components: Web Container (Tomcat)

Versions: 2016

Failure Type: Others

Found In Build/Fixed In Build: 2016.0.07.311392 /

Priority/Frequency: Normal /

Locale/System: / Win 2016

Vote Count: 0

Problem Description: 
When you install ColdFusion, the attribute, packetSize, is included by default in the settings for the Tomcat HTTP connector. This is incorrect. 

Steps to Reproduce:
1) Install ColdFusion 2016;
2) Open the file /cfusion/runtime/conf/server.xml in a text editor. Locate the HTTP <connector> elements; these are the connector elements whose protocol value is "HTTP/1.1" or "org.apache.coyote.http11.Http11NioProtocol". 

Actual Result: You will see that each <connector> element has the attribute, packetSize="65535".

Furthermore, whenever you restart ColdFusion you will find the following line in coldfusion-error.log: "WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'packetSize' to '65535' did not find a matching property." .

Expected Result: 
1) No packetSize attribute in the HTTP connector elements in server.xml;
2) No warning about the 'packetSize' property in server.xml

Any Workarounds:
Not applicable.

Attachments:

Comments:

ColdFusion 2016 currently uses Tomcat version 8.5.32. You will find the settings of Tomcat 8.5.* at https://tomcat.apache.org/tomcat-8.5-doc/config/http.html
Comment by A. Bakia
29966 | November 26, 2018 01:07:16 PM GMT
For the AJP connector, packetSize limits the amount of (binary) bytes per packet, a limit that also applies to each load-balancer worker. However, I am uncertain as to the effect of this setting for HTTP connectors. It might be benign. But it might also be critical. For one thing, it is shared by all ColdFusion instances.
Comment by A. Bakia
29967 | November 26, 2018 02:08:15 PM GMT