powered by Jive Software

FlashCrossDomainHandler causes the CPU usage goes up to 100% in Openfire 3.7.x

Our company deployed a lastest openfire server (3.7.1 alpha) for production test.

We found that after running for several hours, the openfire server always has a

100% CPU usage.

By using the jvirtualVM to monitor the CPU usage sample graph, we found this

is caused by the read() method (see the code below) of the FlashCrossDomainHandler

class. it can run into a infinite loop under some circumstances.

protected String read(BufferedReader in) {

StringBuffer buffer = new StringBuffer();

int codePoint;

boolean zeroByteRead = false;

try {

do {

codePoint = in.read();

if (codePoint == 0 || codePoint == ā€˜\nā€™) {

zeroByteRead = true;


else if (Character.isValidCodePoint(codePoint)) {




while (!zeroByteRead && buffer.length() < 200);


catch (Exception e) {

Log.debug("Exception (read): " + e.getMessage());


return buffer.toString();


Then we commented the read() method, the validation of the incoming stream and

returned the cross domain policy text straightway in while loop of the startServer()

method , as the result the CPU usage became normal.



Do you still have to make this change with the most recent release of openfire?