Bug 55453

Summary: AJP send Body with Status 304
Product: Tomcat 7 Reporter: Dieter Paradeiser <dieter.paradeiser>
Component: ConnectorsAssignee: Tomcat Developers Mailing List <dev>
Severity: normal    
Priority: P2    
Version: unspecified   
Target Milestone: ---   
Hardware: PC   
OS: Windows XP   

Description Dieter Paradeiser 2013-08-20 04:48:03 UTC
When Status 304 is set to the Response, AJP send the Body to Apache2. In the HTTP-Connector there is a check against 304, see Method "prepareResponse" in Class org.apache.coyote.http11.AbstractHttp11Processor.

304 with Body will corrupt Apache2, see Bug https://issues.apache.org/bugzilla/show_bug.cgi?id=23181
Comment 1 Christopher Schultz 2013-08-20 15:07:45 UTC
So you are saying that AbstractAjpProcessor.prepareResponse needs to have similar logic?

Under what conditions is a 304 response being sent along with a body? Is this a Tomcat problem (i.e. a situation where Tomcat itself generates a 304-response with a body) or is this a situation where a webapp can attempt to return a 304 response with a body and you want Tomcat to prevent it from doing so?

RFC 2616 does use RFC-MUST-NOT language when referring to 304 responses: "the response MUST NOT contain a message-body".
Comment 2 Dieter Paradeiser 2013-08-20 15:27:50 UTC
*) same logic, would be solve the problem ;o)
**) ajp should also remove the body from response when status 304 is set
*) its a webapp, jira from atlassian
*) I know about the rfc, I also requested a bug for jira (atlassian-support)
Comment 3 Mark Thomas 2013-08-28 13:22:39 UTC
Thanks for the report.

This has been fixed in 7.0.x and trunk and will be included in 8.0.0-RC2 and 7.0.43 onwards.