View Issue Details

IDProjectCategoryView StatusLast Update
0008346Talermechant backendpublic2024-03-07 20:47
Reportermikolai Assigned ToChristian Grothoff  
PrioritynormalSeveritycrashReproducibilityalways
Status closedResolutionfixed 
Product Versiongit (master) 
Target Version0.9.4Fixed in Version0.9.4 
Summary0008346: merchant backend crash on malformed client JSON
Descriptionsend a POST request to pay for an existing and claimed order at `orders/<order_id>/pay`

whenever `coins[*]/ub_sig/cipher` from https://docs.taler.net/core/api-common.html#tsref-type-CoinEnvelope is missing or contains an invalid value (tested with "RSA1" instead of "RSA"), the merchant backend crashes with

```
Feb 07 13:05:32 1561dc32958c taler-merchant-httpd[934]: {}2024-02-07T13:05:32.176067+0000 taler-merchant-httpd-934(8F0XQV3P6JRNFAE56R5M658RGC) WARNING External protocol violation detected at json_helper.c:862.
Feb 07 13:05:32 1561dc32958c taler-merchant-httpd[934]: 2024-02-07T13:05:32.176128+0000 taler-merchant-httpd-934(8F0XQV3P6JRNFAE56R5M658RGC) WARNING External protocol violation detected at taler-merchant-httpd_post-orders-ID-pay.c:2820.
Feb 07 13:05:32 1561dc32958c taler-merchant-httpd[934]: 2024-02-07T13:05:32.176143+0000 taler-merchant-httpd-934(8F0XQV3P6JRNFAE56R5M658RGC) ERROR Assertion failed at taler-merchant-httpd_post-orders-ID-pay.c:2842. Aborting.
```

expected result: merchant backend should not crash, but return a 400 Bad Request
TagsNo tags attached.

Activities

Christian Grothoff

2024-02-07 14:32

manager   ~0021195

Major fix, see: b01abb5..e1d4b43

Christian Grothoff

2024-02-07 14:32

manager   ~0021196

Oh, and thanks for reporting! :-)

Issue History

Date Modified Username Field Change
2024-02-07 14:19 mikolai New Issue
2024-02-07 14:19 mikolai Status new => assigned
2024-02-07 14:19 mikolai Assigned To => Christian Grothoff
2024-02-07 14:32 Christian Grothoff Status assigned => resolved
2024-02-07 14:32 Christian Grothoff Resolution open => fixed
2024-02-07 14:32 Christian Grothoff Fixed in Version => 0.9.4
2024-02-07 14:32 Christian Grothoff Note Added: 0021195
2024-02-07 14:32 Christian Grothoff Product Version 0.9.4 => git (master)
2024-02-07 14:32 Christian Grothoff Target Version => 0.9.4
2024-02-07 14:32 Christian Grothoff Note Added: 0021196
2024-03-07 20:47 Christian Grothoff Status resolved => closed