tomcat的一个漏洞

1）tomcat版本

java version "1.7.0_04"
Java(TM) SE Runtime Environment (build 1.7.0_04-b20)
Java HotSpot(TM) Server VM (build 23.0-b21, mixed mode)

2）漏洞日志报错

严重: The web application [/struts2_0100] created a ThreadLocal with key of type    [com.opensymphony.xwork2.inject.ContainerImpl$10]
(value[com.opensymphony.xwork2.inject.ContainerImpl$10@169bc15]) and a value of type [java.lang.Object[]] (value [[Ljava.lang.Object;@2cb44]) but failed to remove it when the web application was stopped. This is very likely to create a memory leak.

3）网络搜了一下，处理方法大体有3个

A）换版本
B）修改文件
tomcat的server.xml文件中把下列字段注释掉    
<Listener className= "org.apache.catalina.core.JreMemoryLeakPreventionListener"/>        
C）先将服务关掉，然后部署工程，再启动服务。

TOMCAT不熟悉，先记下这些吧

本文出自 “Focus on Oracle” 博客，请务必保留此出处http://alexy.blog.51cto.com/6115453/1109602