yahoo-eng-team team mailing list archive

[Christopher Yeoh <cyeoh@xxxxxxxxxxx>]

Public bug reported:

Input validation of the name field for the create method for os-server-
groups extension is broken in that it accepts integers, floats, etc as
well as strings as the nova internals code quietly converts these to
strings. This was not picked up by the unittests because they were
correctly all the invalid data passed as the data  was also missing the
policies parameter which is compulsory.

Also we should be tightening the name field to also fail on trailing and
leading spaces as allowing this tends to cause confusing situations for
users (this is where we have been headed in other places in the API).

** Affects: nova
     Importance: High
     Assignee: Christopher Yeoh (cyeoh-0)
         Status: New


** Tags: api

** Changed in: nova
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1290326

Title:
  Input validation broken for os-server-groups create method

Status in OpenStack Compute (Nova):
  New

Bug description:
  Input validation of the name field for the create method for os-
  server-groups extension is broken in that it accepts integers, floats,
  etc as well as strings as the nova internals code quietly converts
  these to strings. This was not picked up by the unittests because they
  were correctly all the invalid data passed as the data  was also
  missing the policies parameter which is compulsory.

  Also we should be tightening the name field to also fail on trailing
  and leading spaces as allowing this tends to cause confusing
  situations for users (this is where we have been headed in other
  places in the API).

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1290326/+subscriptions