← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1553921] Re: Nova API didn't check whether user provide injected file content

 

** Changed in: nova
       Status: In Progress => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1553921

Title:
  Nova API didn't check whether user provide injected file content

Status in OpenStack Compute (nova):
  Invalid

Bug description:
  As demonstrated in Nova API ref:
  http://developer.openstack.org/api-ref-compute-v2.1.html#servers-v2.1
  user should encode their injected file content with base64 encoding  before use it.
  But yet we are lack of validation of whether it is correctely encoded,
  and it will pass down to nova/compute/manager for decoding [1]. If the provided content failed to decode, Base64DecodeError will raise but yet
  not handled, this will also cause the async problem of scheduler and
  compute.

  We should add validate this first in the API layer since in this way we can
  save the cost for performing the rest of booting jobs such as scheduling etc.

  [1]
  http://git.openstack.org/cgit/openstack/nova/tree/nova/compute/manager.py#n1910

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1553921/+subscriptions


References