[CAMEL-15833] camel-aws2-sqs: create queue logic is susceptible to TOC/TOU errors

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.4.4, 3.6.0
• Fix Version/s: 3.7.0
• Component/s: camel-aws2
• Estimated Complexity: Unknown
• Assignee: Otavio Rodolfo Piske
• Reporter: Otavio Rodolfo Piske
• Created: 09/Nov/20 09:10
• Updated: 10/Nov/20 10:47
• Resolved: 10/Nov/20 10:47

Description

The AWS v2 SQS component has a time-of-check / time-of-use bug when creating queues. Currently, the code checks if the queue exists and, if not, creates it.

However, if another application or thread creates the queue in between the check and the creation, the component fails and the startup is aborted.

 

IMHO, a better approach would be to - in case of an exception - check if the queue hasn't been created before aborting.

Issue Links

• links to: GitHub Pull Request #4582