Re: [Actionframework-users] severe bug in session cleanup

[Petr T. <Pet...@pi...>]

 >> log.error("WebSphere", new Exception()); into
 >> ActionRuntime.destroySession(String) method.
 >
 > Sorry, not very easily. I'm doing development on Jetty, and my client
 > is hosting on websphere, but I don't have websphere myself. Plus I've
 > already patched the version of action servlet we are running to not
 > do this. websphere is really just apache underneath, except out of
 > date and with ibm's own bugs thrown in. but you could likely see this
 > using tomcat, and at least then you'd have source access.

public void destroySession(String sessionId) {
      HttpSession session = (HttpSession) sessions.get(sessionId);

      if (session != null)
          try {
              String stack = Util.getStackTrace(new Exception());

              if (stack.indexOf("org.actionframework." +
                                "ActionServlet$SessionObject") == -1)
                  session.invalidate();
          } catch (Throwable e) {}

      destroySessionComponents(sessionId);
      sessions.remove(sessionId);
}

Ok, would you be satisfied with something like this? If so, beta2
could be out tomorrow! :)

-Petr
-- 
[ http://dione.zcu.cz/~toman40 - Pet...@pi... - ICQ=22957959 ]