Multipart range requests leave file handles open [SPR-15559]

[spring-projects-issues]

Aaron Sharp opened SPR-15559 and commented

If a browser sends a multipart range request (with the header Range: bytes=1-2,3-4), the ResourceRegionHttpMessageConverter executes its method writeResourceRegionCollection(Collection, HttpOutputMessage). This method opens input streams to each ResourceRegion that the request specifies, but never closes them. These file handles are left open, and if too many accumulate, the web server can crash.

So far, I have only seen multipart range requests when Internet Explorer (version 11) is interrupted during a long download, and the user clicks refresh to complete the download.

---

Affects: 4.3.7, 4.3.8

Referenced from: commits eaac348, 22bf9fe