Uploaded image for project: 'ZooKeeper'
  1. ZooKeeper
  2. ZOOKEEPER-1877

Malformed ACL Id can crash server with skipACL=yes

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Critical
    • Resolution: Fixed
    • 3.5.0
    • 3.5.0
    • server
    • None
    • Reviewed

    Description

      Because of the way fixupACL is written in PrepRequestProcessor, a request that feeds in an ACL with null members in the Id will cause a server with skipACL=yes to crash.

      A patch will be provided that re-introduces checks for well-formed ACLs even if skipACL is enabled.

      Attachments

        1. ZOOKEEPER-1877.patch
          13 kB
          Chris Chen

        Activity

          People

            cchen Chris Chen
            cchen Chris Chen
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: