I just tried accessing https://drupal.stackexchange.com/admin, and I got the following error:

System.NullReferenceException: Object reference not set to an instance of an object. at ASP._Page_Views_Shared_UserInfo_cshtml.<_PostDateDefault>b__1(TextWriter __razor_helper_writer) in c:\sites\stackexchange-network\Views\Shared\UserInfo.cshtml:line 49 at ASP._Page_Views_Shared_UserInfo_cshtml.b__2(TextWriter __razor_helper_writer) in c:\sites\stackexchange-network\Views\Shared\UserInfo.cshtml:line 95 at ASP._Page_Views_Shared_UserInfo_cshtml.Execute() in c:\sites\stackexchange-network\Views\Shared\UserInfo.cshtml:line 125 at System.Web.WebPages.WebPageBase.ExecutePageHierarchy() at System.Web.Mvc.WebViewPage.ExecutePageHierarchy() at System.Web.WebPages.WebPageBase.ExecutePageHierarchy(WebPageContext pageContext, TextWriter writer, WebPageRenderingBase startPage) at StackOverflow.Controllers.StackOverflowController.RenderPartialRazorViewToString(Controller controller, String viewName, Object model) in c:\TeamCity\BuildAgent\work\af6c756150208ff6\StackOverflow\Controllers\ControllerBase.cs:line 919


Occurs on many other pages across the sites as well.

  • yes, i heard they got hacked – l--''''''---------'''''''''''' Aug 29 '12 at 17:28
  • 5
    Looks like this will get thrown anywhere that uses the UserInfo partial. I noticed it on "Responses" as well. – Phillip Schmidt Aug 29 '12 at 17:37
  • 3
    @АртёмЦарионов - No, just a buggy build got deployed. Literally nothing but a missing if(Post != null), but an awfully important one. – Kevin Montrose Aug 29 '12 at 17:53
  • @KevinMontrose if I had to guess, I'd say this had to do with the logic on whether or not to display a user-action-time div. Am I right? – Phillip Schmidt Aug 29 '12 at 18:04
  • @KevinMontrose or at least get the data for it – Phillip Schmidt Aug 29 '12 at 18:05
  • @PhillipSchmidt - calculating the time delta for it, yeah. – Kevin Montrose Aug 29 '12 at 18:10
  • Lol, there are quite a lot of information about SO that is shown there. – nhahtdh Aug 29 '12 at 18:17
  • @nhahtdh yeah, now everyone will know that SO has a view called UserInfo that has at least 125 lines. Quick, somebody rename it! – Phillip Schmidt Aug 29 '12 at 18:20
  • @KevinMontrose what, do I not get a "debugger" badge or something? A job, maybe? :P – Phillip Schmidt Aug 29 '12 at 18:23
  • @KevinMontrose that's exactly what i would say if i got hacked ;) – l--''''''---------'''''''''''' Aug 29 '12 at 19:16

Ugh, what a day.

Another bug in view conversion, this one touched a lot of pages (basically anywhere we show a user card without a single Post associated). A fix is rolling out.

| improve this answer | |
  • 9
    Not trying to criticize, but there is always a better alternative to displaying a stack trace on an exception in a release environment. I'm very surprised to see this on a site as esteemed as SO. – Phillip Schmidt Aug 29 '12 at 17:45
  • 1
    Though I guess due to the nature of the site, maybe it isn't such a bad thing. – Phillip Schmidt Aug 29 '12 at 17:47
  • 5
    @Phillip - you're right, it's complete crap as it dodges all our error logging too. I'm checking in a fix for that with a vengeance. – Kevin Montrose Aug 29 '12 at 17:48
  • So, reports of being hacked are greatly exaggerated? Could someone put out a meta post (WE WERE NOT HACKED ON AUGUST 29th 2012)? – Peter Turner Aug 29 '12 at 17:51
  • 1
    @PeterTurner this doesn't in any way smell like the result of any kind of attack. What would it be, SQL injection? Couldn't be, since we see user cards elsewhere on the site. SO databases aren't going to have duplicate data, so if SQL injection were the case they'd be gone everywhere. Not that SO would be vulnerable to SQL injection in the first place. This is pretty clearly a logic error. – Phillip Schmidt Aug 29 '12 at 17:57
  • Beat's me, I was just checking out meta, as I am wont to do after seeing weird errors, and saw "yeah, I heard they got hacked" after the wordpress fiasco, it would be good to know from the Devs. Some of us can't smell .NET as well as others :) – Peter Turner Aug 29 '12 at 18:02
  • 2
    On a programming Q&A I don't expect people to go: "Hallup!!! 1337 hackxorz!?!?! OMGWTFBBQ" when there is some error message somewhere... @PeterTurner – PeeHaa Aug 29 '12 at 18:15
  • 1
    @PeeHaa well... umm Christianity is not a programming Q&A site. In any event, that was the first thing I saw when I came and looked here to report the bug. – Peter Turner Aug 29 '12 at 18:25
  • 1
    In that case it wasn't a hacker, but a higher being. – PeeHaa Aug 29 '12 at 18:26
  • More fun with stack traces -- from the "top users in this tag" page. – Matt Aug 29 '12 at 20:10

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .