0004650: Sessions from previous Resin instance silently being reused on very first request to new instance

Viewing Issue Advanced Details [ Jump to Notes ]

[ View Simple ] [ Issue History ] [ Print ]

Category

Severity

Reproducibility

Date Submitted

Last Update

0004650

[Resin]

minor

always

07-01-11 16:43

08-01-11 17:27

Reporter

bhauer

View Status

public

Assigned To

alex

Priority

normal

Resolution

fixed

Platform

Status

closed

Projection

none

OS Version

ETA

none

Fixed in Version

4.0.21

Product Version

4.0.19

Product Build

Summary

0004650: Sessions from previous Resin instance silently being reused on very first request to new instance

Description

If the very first request received by a Resin instance uses a RequestDispatcher to include a JSP, the session will be silently replaced with a session that was created during a previous execution of Resin.

To reproduce:
1. Start Resin.
2. Make a request that sets a session value to 'A'.
3. Stop Resin.
4. Start Resin.
5. Make a request that sets the same session value to 'B' and then includes a JSP via a RequestDispatcher. In the JSP, display the session value and observe 'A'.
6. Make subsequent requests, and observe that all future requests work normally.

Steps To Reproduce

Additional Information

The attached very simple war file (source included inside) demonstrates the problem.

Attached Files

session-test.war [^] (7,014 bytes) 07-01-11 16:43

Relationships

Notes
(0005413) alex 08-01-11 17:27	Unable to reproduce. Also: session-test.war appears broken.

Issue History
Date Modified	Username	Field	Change
07-01-11 16:43	bhauer	New Issue
07-01-11 16:43	bhauer	File Added: session-test.war
08-01-11 17:26	alex	Status	new => assigned
08-01-11 17:26	alex	Assigned To	=> alex
08-01-11 17:27	alex	Status	assigned => closed
08-01-11 17:27	alex	Note Added: 0005413
08-01-11 17:27	alex	Resolution	open => fixed
08-01-11 17:27	alex	Fixed in Version	=> 4.0.21

Mantis 1.0.0rc3[^]

30 total queries executed.
26 unique queries executed.