Created attachment 26521 [details] Patch created against tomcat/tc6.0.x/trunk Session related errors prevent clean recycle of org.apache.catalina.connector.Request and org.apache.catalina.connector.Response objects by CoyoteAdapter. In org.apache.catalina.connector.Request.recycle() method, if an exception is thrown by session.endAccess() call, request object recycling aborts failing to cleanup fully and leaving the request object in inconsistent state. Further requests processed by CoyoteAdapter.service() using this inconsistent request object result in request being redirected to the last url that resulted in inconsistent request object which is still holding on to wrong session and contexts.
Thanks for the report. Fixed in 7.0.x and will be in 7.0.7 onwards. I used a slightly different patch but it does the same thing. I have proposed a back-port of the fix for 6.0.x
Fixed in 6.0.x and will be included in 6.0.31 onwards.
Fixed in 5.5 with r1066996 and will be in 5.5.33.