ignite-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrey Novikov (JIRA)" <j...@apache.org>
Subject [jira] [Created] (IGNITE-1887) REST-HTTP change queryId generation from sequence to random.
Date Wed, 11 Nov 2015 02:37:11 GMT
Andrey Novikov created IGNITE-1887:
--------------------------------------

             Summary: REST-HTTP change queryId generation from sequence to random.
                 Key: IGNITE-1887
                 URL: https://issues.apache.org/jira/browse/IGNITE-1887
             Project: Ignite
          Issue Type: Bug
            Reporter: Andrey Novikov
            Assignee: Andrey Novikov
            Priority: Minor


First problem:
 1. client1 execute query and get queryId = 1.
 2. node where query was executed is restarted (queryId generator
initialized to zero).
 3. client2 execute some query and also get queryId=1.
 4. client1 fetch next page for queryId=1 and GETS results of client2.

Second problem:
 As queryId is generated sequentially it is very easy to brute force and
some client could get data of other clients too easy.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message