Aarrgghh!!

Want to crash a CF server?

I found a new way to make your administrators life hell.

  • Create an application mapping to a custom tags directory.
  • Put a custom tag named "doSomething.cfm" in it.
  • Create a ColdFusion page named doSomething.cfm in your application root.
  • Call <cf_doSomething.cfm> in that page.
  • Browse to that page.
  • Watch your ColdFusion server die

I kinda feel like I shouldn't bother with a bug report because, well, it was a pretty stupid thing for me to do. And in fairness, it won't crash, it just can't do anything while it's processing that infinite loop.


August 27, 2007 Posted by Terrence Ryan at 9:03 AM

ColdFusion, Web Development,



Comments

This is where the CFMODULE tag is useful to disambiguate the exact location of the CFML custom tag.


Posted by: Steven Erat at August 27, 2007 2:44 PM

Aarrgghh Guy! That makes a lot of sense, Steven. I renamed, and moved on. But if I'm ever in the situation where I can't I now know what to do.




Posted by: Terrence Ryan at August 27, 2007 4:11 PM

thats why CF looks for custom tags in the caller dir by default before looking for them in the specified custom tags dir.

thats a stupid cf behavior. if it uses a default dir for customs, it oughta use it first.


Posted by: Alexei at August 28, 2007 10:15 AM

Posted by Who at September 2, 2010 3:00 PM

Post a comment











Remember personal info?