eclipse-ee4j / eclipse-ee4j/tyrus
TyrusSession should cancel the IdleTimeoutFuture in cleanAfterClose
Open
- Dominant language
- Java
- Stars
- 128
- Forks
- 49
- PR merge metrics
- No merged PRs in 30d
Description
Currently if a session is closed the idleTimeoutFuture is not cancelled. This can lead to a build up of uncancelled tasks in the ManagedScheduledExecutorService which can cause memory exhaustion and is a potential DDOS attack route see https://github.com/payara/Payara/issues/2564
Contributor guide
Assessment
This issue has not been assessed yet.