JR38932: CMVC 207405 - REMOVE THE POSSIBILITY OF THE BUSINESS CONTEXT CACHE ENTRY OF ONE THREAD BEING SHARED WITH ANOTHER.

7.0.0-WS-WCServer-FP009
WebSphere Commerce Version 7.0.0.4 Fix Pack
WebSphere Commerce Version 7.0.0.3 Fix Pack
WebSphere Commerce Version 7.0.0.5 Fix Pack
WebSphere Commerce Version 7.0.0.6 Fix Pack
WebSphere Commerce Version 7.0.0.7 Fix Pack
WebSphere Commerce Version 7.0.0.8 Fix Pack
WebSphere Commerce Version 7.0.0.9 Fix Pack

APAR status

• Closed as program error.

Error description

• In IBM WebSphere Commerce, the business context service flushes
  the internal cache for a user when the thread completes the
  user's request. This flush is based on the WebContainer thread's
  hash codes. When the WebContainer threads share the same hash
  code, the business context service flushes all threads sharing
  the same thread hash code.
  
  This leads to a loss of the business context data in the
  internal cache. In turn, this may lead to various issues with
  commands and views not being found, as well as possibly access
  control errors. There is no risk to the security of the user as
  the request process uses the activity id from the user's
  cookies, which are not shared, to access the internal cache for
  the business context data.
  

Local fix

• Restarting the server will force the WebContainer threads to be
  recreated, and securing new hash codes.
  

Problem summary

• USERS AFFECTED:
  All WebSphere Commerce users on v7.0.
  
  PROBLEM ABSTRACT:
  WebContainer threads sharing the same hash code in WebSphere
  Commerce  encounter losses of business context information
  during a user request.
  
  BUSINESS IMPACT:
  Shoppers may experience interruption in their shopping
  experience as they may encounter various access control errors,
  command not found errors, and view not found errors.
  
  RECOMMENDATION:
  

Problem conclusion

• The internal cache reference and business context flush
  operation will be updated to use a unique thread identifier
  instead of hash codes.
  -------------------------------------------------------------
  The latest available maintenance information can be obtained
  from the Recommended Fixes for WebSphere Commerce technote:
  http://www.ibm.com/support/docview.wss?rs=3046&uid=swg21261296
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WC BUS EDITION

• Fixed component ID

  5724I3800

Applicable component levels

• R700 PSY

     UP