View Issue Details

IDProjectCategoryView StatusLast Update
0004730Talerexchangepublic2021-09-02 16:14
ReporterFlorian Dold Assigned ToChristian Grothoff Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PriorityhighSeveritycrashReproducibilityhave not tried
Status closedResolutionfixed 
Product Version0.1 
Target Version0.2Fixed in Version0.2 
Summary0004730: refresh can trigger ERROR Assertion failed at taler-exchange-httpd_db.c:936.
DescriptionValues aren't sufficiently validated before passing them on to the DB layer.

This kills the exchange ...
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

Christian Grothoff

2016-10-13 23:45

manager   ~0011323

Actually, the assertion was slightly wrong (should have checked against GNUNET_SYSERR, not for GNUNET_OK, as GNUNET_NO is an acceptable value). This was not input validation, as the invariant holds based on data present at the exchange.

Fixed in b1afd5e..ecce56c

Christian Grothoff

2021-09-02 16:14

manager   ~0018305

Fix committed to master branch.

Issue History

Date ModifiedUsernameFieldChange
2016-10-13 18:59Florian DoldNew Issue
2016-10-13 18:59Florian DoldStatusnew => assigned
2016-10-13 18:59Florian DoldAssigned To => Christian Grothoff
2016-10-13 23:45Christian GrothoffNote Added: 0011323
2016-10-13 23:45Christian GrothoffStatusassigned => informing
2016-10-13 23:45Christian GrothoffFixed in Version => 0.2
2016-10-13 23:45Christian GrothoffResolutionopen => fixed
2016-10-13 23:45Christian GrothoffProduct Version => 0.1
2016-10-13 23:45Christian GrothoffTarget Version => 0.2
2016-11-20 02:26Christian GrothoffStatusinforming => closed
2021-09-02 16:13Christian Grothoff
2021-09-02 16:14Christian GrothoffNote Added: 0018305