While looking at the WebdavServlet source code I spotted the following line where expired collection locks are being removed from the resource locks: https://github.com/apache/tomcat/blob/8.5.x/java/org/apache/catalina/servlets/WebdavServlet.java#L1064 However, the usual pattern seems to be that expired locks are being removed from the same collection they were found in. So this may be a bug. Is this correct?
Thanks for spotting that. I agree that there is a bug there. Fixed in: - 11.0.x for 11.0.0-M7 onwards - 10.1.x for 10.1.10 onwards - 9.0.x for 9.0.76 onwards - 8.5.x for 8.5.90 onwards