ICEfaces
  1. ICEfaces
  2. ICE-3268

Session timeout combined with manual logout can cause deadlock

          Details

          • Type: Bug Bug
          • Status: Closed
          • Priority: Major Major
          • Resolution: Fixed
          • Affects Version/s: 1.7.1
          • Fix Version/s: 1.7.2
          • Component/s: Framework
          • Labels:
            None
          • Environment:
            any web server
          • Workaround Description:
            Potentially. This might be mitigated by not navigating to a page that creates a new session when the user logs out.

            Description

            New in 1.7.1 is the callback into the SessionDispatcher$Listener class when sessions are invalidated. This was intended to help with ICE-3073 and memory leaks with Acegi filter based session invalidation. However this causes a potential deadlock situation in an application where there are session timeouts occuring interspersed with manual session invalidation.

            Client has an application where the user is taken to a page that creates a new session when the user logs out. After some time, this newly created session will expire and the SessionDispatcher$Monitor class will attempt to invalidate sessions at the same time as the user is logging out. Using JMeter, the deadlock is easy to reproduce.

              Activity

              Ascending order - Click to sort in descending order
              Hide
              Permalink
              Greg Dick added a comment -

              Testing with some changes checked in on the 5th July, this problem appears to have been fixed, at least according to my test application.

              Show
              Greg Dick added a comment - Testing with some changes checked in on the 5th July, this problem appears to have been fixed, at least according to my test application.
              Hide
              Permalink
              Mircea Toma added a comment -

              The refactoring for issue ICE-3091 got rid of any thread blocking for shutdown sequence which avoids side effects on session expiry.

              Show
              Mircea Toma added a comment - The refactoring for issue ICE-3091 got rid of any thread blocking for shutdown sequence which avoids side effects on session expiry.
              Hide
              Permalink
              Raúl Cuartero added a comment -

              I reproduce this error in version 1.7.2. It doesn´t ocurr in previous version.

              Show
              Raúl Cuartero added a comment - I reproduce this error in version 1.7.2. It doesn´t ocurr in previous version.
              Hide
              Permalink
              Mircea Toma added a comment -

              I believe the issue you're seeing is tracked by ICE-3659.

              Show
              Mircea Toma added a comment - I believe the issue you're seeing is tracked by ICE-3659 .
              Hide
              Permalink
              Faissal Boutaounte added a comment -

              Hi,

              Can any one gives us a JMeter plan to reproduce this deadlock?

              thanks

              Show
              Faissal Boutaounte added a comment - Hi, Can any one gives us a JMeter plan to reproduce this deadlock? thanks

                People

                • Assignee:
                  Unassigned
                  Reporter:
                  Greg Dick
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  3 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: