Bug 46101

Summary: org.apache.xml.security.utils.IdResolver is not thread safe
Product: Security - Now in JIRA Reporter: sean.mullan
Component: SignatureAssignee: XML Security Developers Mailing List <security-dev>
Status: RESOLVED FIXED    
Severity: major    
Priority: P2    
Version: Java 1.4.2   
Target Milestone: ---   
Hardware: All   
OS: All   

Description sean.mullan 2008-10-27 14:04:18 UTC 
IdResolver is not thread-safe. It uses an unsynchronized WeakHashMap to store id/element mappings. Multiple threads running in parallel that use this class to register and retrieve id mappings can end up exhibiting erratic behavior.