WeakDataFile has unsafe collection usage

[glassfishrobot]

WeakDataFile maintains a static reference list of current instances of the class (the refList member variable). This is a shared static List, but the implementation used (ArrayList) is not safe for concurrent usage. concurrent modification of an ArrayList can cause all sorts of chaos in this class, possibly leading to leaked references, lost references, or random exceptions during usage.

Affected Versions

[1.9.2]

[glassfishrobot]

Reported by jahlborn

[glassfishrobot]

Was assigned to snajper

[glassfishrobot]

sammefford said:
Any update on this? In a quick look, I have to agree with jahlborn that the usage appears unsafe. It's hard to commit to this project without either a fix or explanation of how it is safe. Since Jersey / JAX-RS depend on Mimepull, I'm wondering if they realize how unsafe that choice may be.

[glassfishrobot]

andrelanka said:
Any news on this?
We use mimepull via Jersey. That makes concurrent access very likely. Why not simply synchronize the methods that access the ArrayList?

[glassfishrobot]

This issue was imported from java.net JIRA MIMEPULL-11