What's causing “Session state has created a session id, but cannot save it because the response was already flushed by the application.”

Question

I\'m getting this fault intermittently.

I found this link which summarises fairly well what I was able to find on the Google: http://www.wacdesigns.com/2009/02/03/s

Answer 1

This error seems to appear when :

• The application start

• You're using a Global.asax even if you're doing something in the Session_Start / End events or not

• Your application forces the Flush of the response too soon

• You're not using the Session before the flush

It is raised by the session state when it try to save the sessionID on release :

System.Web.SessionState.SessionIDManager.SaveSessionID(HttpContext context, String id, Boolean& redirected, Boolean& cookieAdded)
System.Web.SessionState.SessionStateModule.CreateSessionId()
System.Web.SessionState.SessionStateModule.DelayedGetSessionId()
System.Web.SessionState.SessionStateModule.ReleaseStateGetSessionID()
System.Web.SessionState.SessionStateModule.OnReleaseState(Object source, EventArgs eventArgs)
System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

I believe the presence of Global.asax causes the session ID to be saved on release by the SessionStateModule (late?) even if no session have been used instead of HttpSessionState when SessionID is called.

It's the reason why string sessionId = Session.SessionID; trick avoid the problem.

I guess it only appears on application start because of initialization behaviors.

Solutions/tricks :

• Avoid flushing in Page_Load as already said

• Desactivate session state on the page (EnableSessionState)

• Use the SessionID trick before the flush

• Use Response.End() in place of .Flush() if you don't care about errors which can occur after your flush

Answer 2

I recognise this is very old, but I found another reason for the error which might apply to others. If you are using MVC (I was using MVC 4 with .Net 4.0) and you set pages to not buffer by using the web.config element

<pages buffer="false">    

Then if in your code you try to push data into the session object, may be risking getting this error if the page had started rendering before your child view or action performing the session state access.

In such cases, you can fix the error by changing the buffer setting above to true. Alternatively, move your session access code to the main view and not in a child action/child view.

Answer 3

I believe the issue here may be exactly that you're doing something to cause page output during Page_Load, which, according to the ASP.NET Page Lifecycle Overview is long before the rendering stage.

Ensure that you never do anything that could trigger page output until after the PreRender stage.

Answer 4

Having just run into this problem myself, I thought I'd share my findings.

The web.config setting DisplayWhenNewSession is irrelevant as it only applies to one particular customcontrol on Codeplex (sorry I've lost the link).

The other suggestion appears to work by initialising the SessionId early. I dug into the code using Reflector and couldn't quite see how this prevented the error here, but it certainly worked for us!

Like most people who seem to run into this bug, we are not explicitly calling Response.Flush() anywhere in the app. We are also using MVC, for the record.

Answer 5

I have!

In the global.asax file you do this :

void Session_Start(object sender, EventArgs e) 
{
    // Code that runs when a new session is started
    string sessionId = Session.SessionID;
}

So easy. It works!