tracker issue : CF-4173657

select a category, or use search below
(searches all categories and all time range)
Title:

setDomainCookies causes NullPointerException on domain change

| View in Tracker

Status/Resolution/Reason: Closed/Fixed/

Reporter/Name(from Bugbase): Kyle Thompson / Kyle Thompson (Kyle Thompson)

Created: 07/19/2016

Components: Core Runtime

Versions: 2016

Failure Type: Non Functioning

Found In Build/Fixed In Build: CF2016_Update1 /

Priority/Frequency: Critical / All users will encounter

Locale/System: English / Windows 10 64 bit

Vote Count: 3

Listed in the version 2016.0.03.300466 Issues Fixed doc
Problem Description:

An application with setDomainCookies set to "yes" will trigger a NullPointerException in coldfusion.runtime.AppHelper.isValidCFID

Steps to Reproduce:

Set setDomainCookies to "yes" with sessionManagement set to "yes". Load "domain.com" then load "www.domain.com" or visa-versa.

Test case Application.cfc:
component {
  this.name="test";
  this.sessionManagement = "yes";
  this.setDomainCookies = "yes";
}

Actual Result:

Null Pointers are another name for undefined values.

Expected Result:

Any page loads

Any Workarounds:

disable setDomainCookies and redirect users to a specific page.

----------------------------- Additional Watson Details -----------------------------

Watson Bug ID:	4173657

External Customer Info:
External Company:  
External Customer Name: Kyle Thompson
External Customer Email:  
External Test Config: My Hardware and Environment details:

Windows 10 / Server 2012 R2

ColdFusion 2016 (all updates)

Both IIS and the Tomcat HTTP connector

Attachments:

Comments:

The fix would be available in the upcoming ColdFusion 2016 update. Thanks!
Comment by S P.
2162 | August 08, 2016 12:50:50 AM GMT
When did the release will be deployed?
Comment by External U.
2163 | August 19, 2016 04:43:07 AM GMT
This is impacting one of our sites right now.
Vote by External U.
2166 | August 19, 2016 05:52:53 PM GMT
This is impacting our migration to CF2016.
Vote by External U.
2167 | September 07, 2016 12:03:16 PM GMT
This is a CRITICAL bug that needs to be addressed ASAP. We can not migrate to CF 2016 while this bug exists.
Vote by External U.
2168 | September 12, 2016 09:52:01 AM GMT
ETA on this release?
Comment by External U.
2164 | September 12, 2016 09:53:02 AM GMT
@David - We plan to release the update in the first week of Oct.
Comment by Vamseekrishna N.
2165 | September 12, 2016 10:41:16 PM GMT