tracker issue : CF-3851459

select a category, or use search below
(searches all categories and all time range)
Title:

[ANeff] Bug for: secure_profile_error.cfm inconsistent handling of errors

| View in Tracker

Status/Resolution/Reason: Closed/Fixed/

Reporter/Name(from Bugbase): Aaron Neff / Aaron Neff (Aaron Neff)

Created: 11/13/2014

Components: Debugging

Versions: 11.0

Failure Type:

Found In Build/Fixed In Build: CF11_Final /

Priority/Frequency: Major / Some users will encounter

Locale/System: English / Win All

Vote Count: 0

Listed in the version 2016.0.0.297996 Issues Fixed doc
Verification notes: verified_fixed on May 17, 2018 using build 2016.0.01.298513 
Problem: Secure Profile's site-wide error handler only logs uncaught errors if they were thrown within onApplicationEnd() or onSessionEnd().

Expected result: Secure Profile's site-wide error handler should log uncaught errors even in Application.cfc's constructor area and its other methods.

Related tickets: 3041747

----------------------------- Additional Watson Details -----------------------------

Watson Bug ID:	3851459

External Customer Info:
External Company:  
External Customer Name: itisdesign
External Customer Email:

Attachments:

  1. November 22, 2014 00:00:00: 1_3851459.zip

Comments:

"Related tickets" should be "Related ticket"
Comment by External U.
10114 | November 13, 2014 09:47:17 AM GMT
Hi Aaron, Actually, I am seeing a behavior opposite to what you are facing. With the CF11 GM build,Secure Profile's site-wide error handler logs uncaught errors for other functions and for those in Application.cfc's constructor area, except onApplicationEnd() & onSessionEnd(). Wrt to the bug CF-3041747, this issue has been fixed & with the latest update the logs are being entered for these 2 functions as well. This is what we are observing , so are we missing something here?
Comment by S P.
10115 | November 20, 2014 05:27:12 AM GMT
Hi S Preethi (sorry I do not know your first name), I still see the same issue in CF11 Update 3 (11,0,03,292245(PreRelease)). Only uncaught errors within onApplicationEnd() and onSessionEnd() are logged. This is on x64 Windows 8.1 Pro - if that matters. I've attached a simple repro app. Just unzip to localhost. Instructions are in readme.txt. Regarding CF-3041747, hopefully those errors are also logged to coldfusion-error.log. I will check and follow-up on CF-3041747. Thanks!, -Aaron
Comment by External U.
10116 | November 21, 2014 05:09:10 PM GMT
Hi Aaron Thank you for such a detailed repro case. I have tried to repro this issue with the testcase that you have provided. I am still seeing a behaviour in contrast to yours. The exceptions are being logged in 3 log files -- application.log / exception.log / coldfusion-out.log & not in coldfusion-error.log. --Preethi
Comment by S P.
10117 | December 04, 2014 05:15:43 AM GMT
Hi Preethi, You're very welcome! I see the same issue on CF11 Update 3 (11,0,03,292480), using same repro case. Could you please try again w/ a fresh install of CF11+Update3 Enterprise edition standalone on x64 Windows? (I verified on x64 Win8.1 and x64 Win2008) When "Site-wide Error Handler" is /CFIDE/administrator/templates/secure_profile_error.cfm in CF Admin, then exception.log shows errors from onApplicationEnd() and onSessionEnd(), but not from any other Application.cfc methods. Thanks!, -Aaron
Comment by External U.
10118 | December 06, 2014 09:20:58 PM GMT
Hi Aaron I am in fact facing this issue with a fresh install of CF11/HF3, with "Site-wide Error Handler" as /CFIDE/administrator/templates/secure_profile_error.cfm in CF Admin. So I would like you to confirm one thing, as to, if you have enabled secure profile (Security-->Secure Profile) in CF Admin.
Comment by S P.
10119 | December 08, 2014 06:17:13 AM GMT
Hi Preethi, Aha! Yes, when Secure Profile is off, site-wide error handler only logs errors for onApplicationEnd() and onSessionEnd(). When Secure Profile is on, site-wide error handler logs errors for all the methods. While testing this, I noticed another issue: 1) Turn Secure Profile off 2) Set site-wide error handler, missing template handler and request queue timeout to the following: /CFIDE/administrator/templates/secure_profile_error.cfm /CFIDE/administrator/templates/missing_template_error.cfm /CFIDE/administrator/templates/request_timeout_error.htm 3) Turn Secure Profile on 4) Turn Secure Profile off 5) See site-wide error handler, missing template handler and request queue timeout paths have been removed/unset Thanks!, -Aaron
Comment by External U.
10120 | December 08, 2014 09:17:10 AM GMT
Fix verified and will be available in the next ColdFusion version.
Comment by S P.
10121 | June 20, 2015 03:08:30 AM GMT
Hi Preethi, Thanks very much! Was the "site-wide error handler, missing template handler and request queue timeout paths have been removed/unset" issue (from my last comment) also fixed? Thanks!, -Aaron
Comment by External U.
10122 | November 24, 2015 01:04:43 AM GMT
Hi Adobe, I've verified all issues I mentioned in this ticket and comments are fixed in CF2016 Update 1 (build 2016.0.01.298513) except for the issues covered by CF-3041747 are not fixed in CF2016 Update 1 (so there must've been a regression there). Thanks!, -Aaron
Comment by Aaron N.
27832 | May 17, 2018 06:49:33 AM GMT