Details

    • Type: Bug
    • Status: Closed
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: Fedora 4.6.0, Fedora 4.7.0
    • Fix Version/s: Fedora 4.6.2, Fedora 4.7.1
    • Component/s: None
    • Labels:
    • Sprint:
      Sprint 2016 - 17

      Description

      RFC 7232 explicitly states that 304 "Not Modified" responses to conditional requests MUST not contain an entity body:

        "A 304 response cannot contain a message-body; it is always terminated
         by the first empty line after the header fields."

      Responses from Fedora *do* have an entity body. When Fedora accessed via clients such as Apache Httpclient, this can cause apparent corruption of responses from Fedora. HttpClient does not consume entity bodies from requests that return a 304. The bytes from the errant entity body returned from Fedora can remain in internal HttpClient buffers, corrupting reads from subsequent responses.

        Attachments

        1. FCREPO-2313.sh
          0.5 kB
          Elliot Metsger
        2. fedora-4.6.0-jetty-9.2.3.v20140905
          0.2 kB
          Elliot Metsger
        3. fedora-4.7.0-jetty-9.2.3.v20140905
          0.2 kB
          Elliot Metsger
        4. fedora-4.7.0-jetty-9.3.9.v20160517
          0.2 kB
          Elliot Metsger
        5. fedora-4.7.0-tomcat-8.5.6
          0.1 kB
          Elliot Metsger

          Activity

            People

            • Assignee:
              esm Elliot Metsger
              Reporter:
              birkland Aaron Birkland
              Reviewer:
              Aaron Coburn
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: