cloudstack-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "ASF GitHub Bot (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CLOUDSTACK-9141) Userdata is not validated for valid base64
Date Sat, 12 Dec 2015 17:02:46 GMT

    [ https://issues.apache.org/jira/browse/CLOUDSTACK-9141?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15054419#comment-15054419
] 

ASF GitHub Bot commented on CLOUDSTACK-9141:
--------------------------------------------

Github user wido commented on the pull request:

    https://github.com/apache/cloudstack/pull/1220#issuecomment-164168237
  
    @bhaisaab Good idea to do that indeed. I think many of us want Java 8.


> Userdata is not validated for valid base64
> ------------------------------------------
>
>                 Key: CLOUDSTACK-9141
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-9141
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: API
>    Affects Versions: 4.6.0, 4.7.0
>            Reporter: Wido den Hollander
>
> Currently the userdata passed to "deployvirtualmachine" is not verified if it is valid
base64.
> It is passed all the way down the the VR without validating if it is correct base64.
> We simple check if it is valid should be done in the management server before attempting
a deployment.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message