PM68392: A REQUEST TO A DEFAULT SERVLET WITH ;JSESSIONID IN URL MIGHT NOT WORK CORRECTLY

8.5.0.1: WebSphere Application Server V8.5 Fix Pack 1
8.5.0.2: WebSphere Application Server V8.5 Fix Pack 2

APAR status

• Closed as program error.

Error description

• After a request to a URI which contains ;jsessionID, similar
  requests but without the ;jsessionID part results in
  StringIndexOutOfBoundsException.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  Users of IBM WebSphere Application Server   *
  *                  Liberty Profile                             *
  ****************************************************************
  * PROBLEM DESCRIPTION: StringIndexOutOfBoundsException         *
  *                      occurs when resubmitting to a URI       *
  *                      which previously contained ;jsessionID  *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  After a request to a resource which is handled by a default
  servlet and the URI contains the ;jsessionID, a
  java.lang.StringIndexOutOfBoundsException might occur in the
  subsequent requests to the same URI but without the
  ;jsessionID.
  The following pre-conditions might take place in order for the
  exception to occur:
  a. The target resource is handled by the default servlet
  AND
  b. Either or both of the following WebContainer custom
  properties are set to true:
  com.ibm.ws.webcontainer.enableDefaultServletRequestPathElements
  = true
  com.ibm.ws.webcontainer.removeTrailingServletpathSlash =
  true
  For example: the first request to
  http://host.com/CXT_ROOT/example;jsessionID=0000XYZ
  is served successfully. Thereafter, any subsequent and similar
  request to http://host.com/CXT_ROOT/example results in a
  StringIndexOutOfBoundsException.
  

Problem conclusion

• The WebContainer code was modified to correctly store the
  request information.
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 8.5.0.1.  Please refer to the recommended updates page
  for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  PM59297

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  LIBERTY PROFILE

• Fixed component ID

  5724J0814

Applicable component levels

• R850 PSY

     UP