yahoo-eng-team team mailing list archive

[Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>]

*** This bug is a duplicate of bug 1371118 ***
    https://bugs.launchpad.net/bugs/1371118

** This bug has been marked a duplicate of bug 1371118
   Image file stays in store if image has been deleted during upload (CVE-2014-9684)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1422716

Title:
  Image data remains in backend after deleting the image (created using
  task api, import-from) when it is in saving state

Status in OpenStack Image Registry and Delivery Service (Glance):
  Fix Released
Status in Glance juno series:
  In Progress
Status in OpenStack Security Advisories:
  In Progress

Bug description:
  Trying to delete image created using task api (import-from) while it
  is in saving state then, image gets deleted from the database, but
  image data remains in the backend.

  Steps to reproduce:
  1. Create image using task api

  $ curl -i -X POST -H 'User-Agent: python-glanceclient' -H 'Content-
  Type: application/json' -H 'Accept-Encoding: gzip, deflate, compress'
  -H 'Accept: */*' -H 'X-Auth-Token: 35a9e49237b74eddbe5057eb434b3f9e'
  -d '{"type": "import", "input": {"import_from":
  "http://releases.ubuntu.com/14.10/ubuntu-14.10-server-i386.iso";,
  "import_from_format": "raw", "image_properties": {"disk_format":
  "raw", "container_format": "bare", "name": "task_image"}}}'
  http://10.69.4.176:9292/v2/tasks

  2. Delete the image before its become active.
     $ glance image-delete <image-id>

  3. Verify image-list does not show deleted image
     $ glance image-list

  Image gets deleted from the database but image data presents in the
  backend.

  Problem:
  In stable/juno if image is deleted while uploading is in progress (image is in saving state) then image_repo.get() will raise NotFound exception which is not caught, so it will not delete image data from the backend.

  This issue is reproducible only in stable/juno.

  Note: You need to replace auth_token in above curl command, otherwise it will raise error for authentication failure.
  (Use 'keystone token-get' command to generate the new token)

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1422716/+subscriptions