yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #47674
[Bug 1553921] Re: Nova API didn't check whether user provide injected file content
** Changed in: nova
Status: In Progress => Invalid
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1553921
Title:
Nova API didn't check whether user provide injected file content
Status in OpenStack Compute (nova):
Invalid
Bug description:
As demonstrated in Nova API ref:
http://developer.openstack.org/api-ref-compute-v2.1.html#servers-v2.1
user should encode their injected file content with base64 encoding before use it.
But yet we are lack of validation of whether it is correctely encoded,
and it will pass down to nova/compute/manager for decoding [1]. If the provided content failed to decode, Base64DecodeError will raise but yet
not handled, this will also cause the async problem of scheduler and
compute.
We should add validate this first in the API layer since in this way we can
save the cost for performing the rest of booting jobs such as scheduling etc.
[1]
http://git.openstack.org/cgit/openstack/nova/tree/nova/compute/manager.py#n1910
To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1553921/+subscriptions
References