Issue

We have found out a scenario that causes outOfMemory error on JBoss Fuse 6.0.0.redhat-024. One request is able to bring the whole application down.

Steps for reproducing this error:
1. Create a simple proxy web service with both inbound and outbound CXF endpoints.
2. Inbound endpoint should not have any WSS4J interceptor i.e. it should not expect any WS Security headers
3. Outbound endpoint should have WSS4JOut interceptor i.e. it should add WS Security header to the outbound request
4. Create a request (we were using SOAP UI) that will call the service above. Request should include WS Security username token header that the inbound endpoint above is not expecting (this header should not have mustUnderstand set to true – it should be ignored). This will cause some kind of infinite loop and Jboss Fuse will crash with out of memory error.