Session_End event, System.NullRefe renceException

[=?Utf-8?B?YnJlbnQ5NjA=?=]

Environment: ASP.NET 2.0, SQL Server 2005, C#, Visual Studio 2005

In my Session_End event, I am executing a stored procedure to update a
database table that is used to log user sessions.

When the user sessions time out, the Session_End event fires successfully.
The stored procedure executes successfully, and I can see the updated data in
the database just as I would expect.

Nonetheless, an exception is being generated by the code that I'ved added to
the Session_End event. This is what part of the exception looks like when
it's emailed to me from the ASP.NET Health Monitoring service:

======
Exception information:
Exception type: System.NullRefe renceException
Exception message: Object reference not set to an instance of an object.

Thread information:
Thread ID: 1
Thread account name: NT AUTHORITY\NETWO RK SERVICE
Is impersonating: False
Stack trace: at ASP.global_asax .Session_End(Ob ject sender, EventArgs e)
=====

And here is the code that of my Session_End event handler:

=====
void Session_End(obj ect sender, EventArgs e)
{
try
{
SqlConnection con = new
SqlConnection(C onfigurationMan ager.Connection Strings["db"].ConnectionStri ng);
SqlCommand cmd = new
SqlCommand("Fin alizeAuthentica tedUserSession" , con);
cmd.CommandType = System.Data.Com mandType.Stored Procedure;

// Add the parameters
// The LogID for this log entry is stored in the session variable
cmd.Parameters. Add(new SqlParameter("@ LogID", SqlDbType.Int, 4));
cmd.Parameters["@LogID"].Value = (int)Session["LogID"];

// @SessionEndDate Time is expressed in UTC
cmd.Parameters. Add(new SqlParameter("@ SessionEndDateT ime",
SqlDbType.DateT ime, 8));
cmd.Parameters["@SessionEndDat eTime"].Value = DateTime.UtcNow ;
try
{
con.Open();
cmd.ExecuteNonQ uery();
}
catch (SqlException err)
{
throw new ApplicationExce ption("A database exception
occurred while updating the authenticated user's record in the database in
the Session_End event handler: " + err.Message);
}
finally
{
con.Close();
}
}
catch (Exception err)
{
throw new ApplicationExce ption("An exception occurred in the
Session_End event handler: " + err.Message);
}
}
=====

Even though the database is being updated correctly, I'm overwhelmed with
error messages from the Health Monitoring service.

If I had to venture a guess, I'd say that one of the resources that is being
cleaned up after the execution of the stored procedure cannot be cleaned up,
due to the session ending.

Yes, I've tried debugging this, and I have not been successful in stepping
through an execution of the code that led to the exception.

Any assistance anyone could provide here would be welcome.

-- brent

[bruce barker]

you are not validating that the session data (LogId) exists before using it.

-- bruce (sqlwork.com)

brent960 wrote:

Environment: ASP.NET 2.0, SQL Server 2005, C#, Visual Studio 2005

In my Session_End event, I am executing a stored procedure to update a
database table that is used to log user sessions.

When the user sessions time out, the Session_End event fires successfully.
The stored procedure executes successfully, and I can see the updated data in
the database just as I would expect.

Nonetheless, an exception is being generated by the code that I'ved added to
the Session_End event. This is what part of the exception looks like when
it's emailed to me from the ASP.NET Health Monitoring service:

======
Exception information:
Exception type: System.NullRefe renceException
Exception message: Object reference not set to an instance of an object.

Thread information:
Thread ID: 1
Thread account name: NT AUTHORITY\NETWO RK SERVICE
Is impersonating: False
Stack trace: at ASP.global_asax .Session_End(Ob ject sender, EventArgs e)
=====

And here is the code that of my Session_End event handler:

=====
void Session_End(obj ect sender, EventArgs e)
{
try
{
SqlConnection con = new
SqlConnection(C onfigurationMan ager.Connection Strings["db"].ConnectionStri ng);
SqlCommand cmd = new
SqlCommand("Fin alizeAuthentica tedUserSession" , con);
cmd.CommandType = System.Data.Com mandType.Stored Procedure;

// Add the parameters
// The LogID for this log entry is stored in the session variable
cmd.Parameters. Add(new SqlParameter("@ LogID", SqlDbType.Int, 4));
cmd.Parameters["@LogID"].Value = (int)Session["LogID"];

// @SessionEndDate Time is expressed in UTC
cmd.Parameters. Add(new SqlParameter("@ SessionEndDateT ime",
SqlDbType.DateT ime, 8));
cmd.Parameters["@SessionEndDat eTime"].Value = DateTime.UtcNow ;
try
{
con.Open();
cmd.ExecuteNonQ uery();
}
catch (SqlException err)
{
throw new ApplicationExce ption("A database exception
occurred while updating the authenticated user's record in the database in
the Session_End event handler: " + err.Message);
}
finally
{
con.Close();
}
}
catch (Exception err)
{
throw new ApplicationExce ption("An exception occurred in the
Session_End event handler: " + err.Message);
}
}
=====

Even though the database is being updated correctly, I'm overwhelmed with
error messages from the Health Monitoring service.

If I had to venture a guess, I'd say that one of the resources that is being
cleaned up after the execution of the stored procedure cannot be cleaned up,
due to the session ending.

Yes, I've tried debugging this, and I have not been successful in stepping
through an execution of the code that led to the exception.

Any assistance anyone could provide here would be welcome.

-- brent