Uploaded image for project: 'Undertow'
  1. Undertow
  2. UNDERTOW-1900

InMemorySessionManager#SessionImpl.changeSessionId does not check if session exist before replacing

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • 2.3.0.Alpha1, 2.2.19.Final
    • None
    • None
    • None

    Description

      When session is created and generator provide ID, createSession iterate up to 100 time to check if ID exists in internal map - if it does, it requests another ID from generator: link

      However, InMemorySessionManager@SessionIImpl#changeSessionId does not, it blindly replace value.

      Attachments

        Issue Links

          is related to

          Bug - A problem that impairs or prevents the functions of the product. UNDERTOW-1790 UT000010: Session is invalid due to concurrent calls changeSessionId() calls on same session

          • Minor - To be worked after urgent, high, and medium priorities are resolved. This term is chosen when the severity of the issue is low, or the complexity or effort to correct it may be higher, relatively speaking. For low priority issues, known workarounds exist or are not needed due to the trivial effort needed to address the issue.
          • Resolved

          Activity

            People

              rhn-cservice-bbaranow Bartosz Baranowski
              rhn-cservice-bbaranow Bartosz Baranowski
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: