[CASSANDRA-13646] Bind parameters of collection types are not properly validated

• Type: Bug
• Status: Resolved
• Priority: Normal
• Resolution: Fixed
• Fix Version/s: 2.2.11, 3.0.15, 3.11.1, 4.0-alpha1, 4.0
• Component/s: CQL/Interpreter
• Bug Category: Correctness - API / Semantic Implementation
• Severity: Normal
• Since Version: 2.2.0
• Assignee: Benjamin Lerer
• Reporter: Benjamin Lerer

Authors

Benjamin Lerer

Reviewers

Andres de la Peña

• Created: 29/Jun/17 13:53
• Updated: 15/May/20 08:04
• Resolved: 07/Jul/17 16:18

Description

It looks like C* is not validating properly the bind parameters for collection types. If an element of the collection is invalid the value will not be rejected and might cause an Exception later on.
The problem can be reproduced with the following test:

    @Test
    public void testInvalidQueries() throws Throwable
    {
        createTable("CREATE TABLE %s (k int PRIMARY KEY, s frozen<set<tuple<int, text, double>>>)");
        execute("INSERT INTO %s (k, s) VALUES (0, ?)", set(tuple(1,"1",1.0,1), tuple(2,"2",2.0,2)));
    }

The invalid Tuple will cause an "IndexOutOfBoundsException: Index: 3, Size: 3"