tracker issue : CF-4205992

select a category, or use search below
(searches all categories and all time range)
Title:

java.lang.StackOverflowError at java.security.AccessController.doPrivileged(Native Method) at java.io.FilePermission

| View in Tracker

Status/Resolution/Reason: To Fix//CannotReproduce

Reporter/Name(from Bugbase): Robert E. / ()

Created: 11/20/2019

Components: Security, Sandbox

Versions: 2016

Failure Type: Crash

Found In Build/Fixed In Build: Update 12 /

Priority/Frequency: Normal / Some users will encounter

Locale/System: English / Win 2008 Server R2 64 bit

Vote Count: 1

Problem Description:

About two weeks ago, we updated out ColdFusion 2016 Application Server from Update 11 to Update 12. We updated the connector, restarted ColdFusion, and everything appeared to go well.

Subsequently, we began to received reports from users that certain applications received errors.  I received no errors from the error handler in the application.cfc so this meant that it was an error from within ColdFusion.  I checked the ColdFusion logs and found that the error was a StackOverflowError.   

The error appeared Java related so I checked our version of Java to ensure it was up-to-date.  It was not the most current version, so we updated the Java version, pointed our instance of ColdFusion to the new version of Java, and restarted the ColdFusion server.  

The problem has not gone away.

Steps to Reproduce:

We cannot reproduce this problem.  It does not appear to be a site wide problem.  It seems to appear only with certain sub-applications hosted on the site, but we have been unsuccessful in reproducing the issue.

Actual Result:

The application crashes.  I have included the stack traces in the attached files.

Expected Result:

The application works correctly and does not crash.

Any Workarounds:

We use ApplicationStop to stop the application, take it out, and restart the application.  The application will then work fine until it crashes again.

Attachments:

Comments:

Because the stack overflow error seems to involve checking permissions, I thought the issue may be the Sandbox. I removed from Sandbox security the apps that seemed to be crashing the most. Because I was on winter vacation, I didn't check the applications on a regular basis for two weeks. After returning I did and found that the ones removed from the sandbox have not crashed and generated a stack overflow error. After checking applications at least once daily, there are applications still crashing and generating a stack overflow error when accessed on the website. I restart the applications and then they run fine until they crash again a few days later.
Comment by Robert E.
32034 | January 16, 2020 01:26:32 PM GMT
"the ones removed from the sandbox have not crashed and generated a stack overflow error" should be "the ones removed from the sandbox have not crashed and have not generated a stack overflow error."
Comment by Robert E.
32035 | January 16, 2020 01:28:07 PM GMT