Return-Path: X-Original-To: apmail-cloudstack-issues-archive@www.apache.org Delivered-To: apmail-cloudstack-issues-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 2B26E18E67 for ; Fri, 11 Dec 2015 12:26:16 +0000 (UTC) Received: (qmail 57312 invoked by uid 500); 11 Dec 2015 12:26:11 -0000 Delivered-To: apmail-cloudstack-issues-archive@cloudstack.apache.org Received: (qmail 57274 invoked by uid 500); 11 Dec 2015 12:26:11 -0000 Mailing-List: contact issues-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cloudstack.apache.org Delivered-To: mailing list issues@cloudstack.apache.org Received: (qmail 57260 invoked by uid 500); 11 Dec 2015 12:26:11 -0000 Delivered-To: apmail-incubator-cloudstack-issues@incubator.apache.org Received: (qmail 57253 invoked by uid 99); 11 Dec 2015 12:26:11 -0000 Received: from arcas.apache.org (HELO arcas) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 11 Dec 2015 12:26:11 +0000 Received: from arcas.apache.org (localhost [127.0.0.1]) by arcas (Postfix) with ESMTP id E202F2C14F6 for ; Fri, 11 Dec 2015 12:26:10 +0000 (UTC) Date: Fri, 11 Dec 2015 12:26:10 +0000 (UTC) From: "Wido den Hollander (JIRA)" To: cloudstack-issues@incubator.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Created] (CLOUDSTACK-9141) Userdata is not validated for valid base64 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 Wido den Hollander created CLOUDSTACK-9141: ---------------------------------------------- Summary: Userdata is not validated for valid base64 Key: CLOUDSTACK-9141 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-9141 Project: CloudStack Issue Type: Bug Security Level: Public (Anyone can view this level - this is the default.) Components: API Affects Versions: 4.6.0, 4.7.0 Reporter: Wido den Hollander Currently the userdata passed to "deployvirtualmachine" is not verified if it is valid base64. It is passed all the way down the the VR without validating if it is correct base64. We simple check if it is valid should be done in the management server before attempting a deployment. -- This message was sent by Atlassian JIRA (v6.3.4#6332)