View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0008112 | Taler | merchant backend | public | 2024-01-18 22:29 | 2026-01-25 16:20 |
| Reporter | Christian Grothoff | Assigned To | oec | Resolution deadline | |
| Implementer | Reviewer | ||||
| Release signed by | Deployed by | ||||
| Verifier | Communicator | ||||
| Data protection authority notification required | No | ||||
| CSIRT notification required | No | ||||
| Estimated effort (hours) | Actual effort (hours) | 0 | |||
| Fast-track | No | ||||
| Work package | none | ||||
| Priority | normal | Severity | feature | Reproducibility | N/A |
| Status | implementing | Resolution | open | ||
| Platform | i7 | OS | Debian GNU/Linux | OS Version | squeeze |
| Product Version | git (master) | ||||
| Target Version | 1.10 | ||||
| Summary | 0008112: Merchant security review | ||||
| Description | Please start to use this as the "parent" bug for individual issues found in the merchant security audit. | ||||
| Tags | No tags attached. | ||||
| ID | Summary | Status | Assigned To | Estimated effort (hours) |
|---|---|---|---|---|
| 0008038 | curl defaults allow redirect to http:// | closed | Christian Grothoff | |
| 0008054 | handle_exchanges_finished: integer truncation | closed | Christian Grothoff | |
| 0008057 | TALER_AUDITOR_get_config: superfluous GNUNET_free | closed | Christian Grothoff | |
| 0008071 | TALER_denom_ewv_deep_copy does not actually do a deep copy | closed | Christian Grothoff | |
| 0008088 | TALER_EXCHANGE_batch_deposit: memory leak in error case | closed | Christian Grothoff | |
| 0008089 | reserve_batch_withdraw_ok: index should be size_t | closed | Christian Grothoff | |
| 0008095 | reserve_batch_withdraw_ok: misleading comment? | closed | Christian Grothoff | |
| 0008100 | parse_restrictions: integer truncation | closed | Christian Grothoff | |
| 0008101 | csr_ok: integer truncation | closed | Christian Grothoff | |
| 0008102 | append_signature: buffer overflow | closed | Christian Grothoff | |
| 0008103 | parse_fees: integer truncation | closed | Christian Grothoff | |
| 0008104 | parse_json_denomkey_partially: memory leak? | closed | Christian Grothoff | |
| 0008105 | parse_json_auditor: integer truncation | closed | Christian Grothoff | |
| 0008106 | denoms_cmp: comment is wrong | closed | Christian Grothoff | |
| 0008107 | TALER_EXCHANGE_Keys: integer truncation | closed | Christian Grothoff | |
| 0008108 | decode_keys_json: integer truncation | closed | Christian Grothoff | |
| 0008109 | feature request: reference counting is not atomic | acknowledged | ||
| 0008110 | feature request: library functions should not abort the process | acknowledged | ||
| 0008200 | TALER_EXCHANGE_management_revoke_denomination_key: memory leak | closed | Christian Grothoff | |
| 0008202 | TALER_EXCHANGE_management_revoke_signing_key: memory leak | closed | Christian Grothoff | |
| 0008204 | TALER_EXCHANGE_management_set_global_fees: memory leak | closed | Christian Grothoff | |
| 0008215 | TALER_EXCHANGE_management_set_wire_fees: memory leak | closed | Christian Grothoff | |
| 0008218 | TALER_EXCHANGE_management_update_aml_officer: memory leak | closed | Christian Grothoff | |
| 0008219 | TALER_EXCHANGE_management_disable_wire: memory leak | closed | Christian Grothoff | |
| 0008220 | TALER_EXCHANGE_management_enable_wire: memory leak | closed | Christian Grothoff | |
| 0008221 | TALER_EXCHANGE_purse_create_with_deposit: memory leak | closed | Christian Grothoff | |
| 0008222 | TALER_EXCHANGE_purse_deposit: memory leak | closed | Christian Grothoff | |
| 0008242 | TALER_EXCHANGE_account_merge: memory leak | closed | Christian Grothoff | |
| This issue (hours) | ||||
| Its children (hours) | 0 | |||
| Together (hours) | 0 | |||
Nothing is missing: the plan can be finished.
| parent of | 0008108 | closed | Christian Grothoff | decode_keys_json: integer truncation |
| parent of | 0008107 | closed | Christian Grothoff | TALER_EXCHANGE_Keys: integer truncation |
| parent of | 0008103 | closed | Christian Grothoff | parse_fees: integer truncation |
| parent of | 0008104 | closed | Christian Grothoff | parse_json_denomkey_partially: memory leak? |
| parent of | 0008106 | closed | Christian Grothoff | denoms_cmp: comment is wrong |
| parent of | 0008110 | acknowledged | feature request: library functions should not abort the process | |
| parent of | 0008109 | acknowledged | feature request: reference counting is not atomic | |
| parent of | 0008105 | closed | Christian Grothoff | parse_json_auditor: integer truncation |
| parent of | 0008102 | closed | Christian Grothoff | append_signature: buffer overflow |
| parent of | 0008100 | closed | Christian Grothoff | parse_restrictions: integer truncation |
| parent of | 0008101 | closed | Christian Grothoff | csr_ok: integer truncation |
| parent of | 0008071 | closed | Christian Grothoff | TALER_denom_ewv_deep_copy does not actually do a deep copy |
| parent of | 0008095 | closed | Christian Grothoff | reserve_batch_withdraw_ok: misleading comment? |
| parent of | 0008089 | closed | Christian Grothoff | reserve_batch_withdraw_ok: index should be size_t |
| parent of | 0008088 | closed | Christian Grothoff | TALER_EXCHANGE_batch_deposit: memory leak in error case |
| parent of | 0008057 | closed | Christian Grothoff | TALER_AUDITOR_get_config: superfluous GNUNET_free |
| parent of | 0008054 | closed | Christian Grothoff | handle_exchanges_finished: integer truncation |
| parent of | 0008038 | closed | Christian Grothoff | curl defaults allow redirect to http:// |
| parent of | 0008200 | closed | Christian Grothoff | TALER_EXCHANGE_management_revoke_denomination_key: memory leak |
| parent of | 0008204 | closed | Christian Grothoff | TALER_EXCHANGE_management_set_global_fees: memory leak |
| parent of | 0008202 | closed | Christian Grothoff | TALER_EXCHANGE_management_revoke_signing_key: memory leak |
| parent of | 0008215 | closed | Christian Grothoff | TALER_EXCHANGE_management_set_wire_fees: memory leak |
| parent of | 0008218 | closed | Christian Grothoff | TALER_EXCHANGE_management_update_aml_officer: memory leak |
| parent of | 0008219 | closed | Christian Grothoff | TALER_EXCHANGE_management_disable_wire: memory leak |
| parent of | 0008220 | closed | Christian Grothoff | TALER_EXCHANGE_management_enable_wire: memory leak |
| parent of | 0008221 | closed | Christian Grothoff | TALER_EXCHANGE_purse_create_with_deposit: memory leak |
| parent of | 0008222 | closed | Christian Grothoff | TALER_EXCHANGE_purse_deposit: memory leak |
| parent of | 0008242 | closed | Christian Grothoff | TALER_EXCHANGE_account_merge: memory leak |
| Not all the children of this issue are yet resolved or closed. | ||||
| I fixed a few issues in the merchant.git; since you didn't start yet, we probably should bump your tag. Please let me know if/when you are about to start... | |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2024-01-18 22:29 | Christian Grothoff | New Issue | |
| 2024-01-18 22:29 | Christian Grothoff | Status | new => assigned |
| 2024-01-18 22:29 | Christian Grothoff | Assigned To | => fefe |
| 2024-01-18 22:30 | Christian Grothoff | Relationship added | parent of 0008108 |
| 2024-01-18 22:30 | Christian Grothoff | Relationship added | parent of 0008107 |
| 2024-01-18 22:30 | Christian Grothoff | Relationship added | parent of 0008103 |
| 2024-01-18 22:30 | Christian Grothoff | Relationship added | parent of 0008104 |
| 2024-01-18 22:31 | Christian Grothoff | Relationship added | parent of 0008106 |
| 2024-01-18 22:31 | Christian Grothoff | Relationship added | parent of 0008110 |
| 2024-01-18 22:31 | Christian Grothoff | Relationship added | parent of 0008109 |
| 2024-01-18 22:31 | Christian Grothoff | Relationship added | parent of 0008105 |
| 2024-01-18 22:31 | Christian Grothoff | Relationship added | parent of 0008102 |
| 2024-01-18 22:31 | Christian Grothoff | Relationship added | parent of 0008100 |
| 2024-01-18 22:32 | Christian Grothoff | Relationship added | parent of 0008101 |
| 2024-01-18 22:32 | Christian Grothoff | Relationship added | parent of 0008071 |
| 2024-01-18 22:32 | Christian Grothoff | Relationship added | parent of 0008095 |
| 2024-01-18 22:32 | Christian Grothoff | Relationship added | parent of 0008089 |
| 2024-01-18 22:32 | Christian Grothoff | Relationship added | parent of 0008088 |
| 2024-01-18 22:33 | Christian Grothoff | Relationship added | parent of 0008057 |
| 2024-01-18 22:33 | Christian Grothoff | Relationship added | parent of 0008054 |
| 2024-01-18 22:33 | Christian Grothoff | Relationship added | parent of 0008038 |
| 2024-01-22 15:49 | Christian Grothoff | Relationship added | parent of 0008200 |
| 2024-01-22 16:01 | Christian Grothoff | Relationship added | parent of 0008204 |
| 2024-01-22 16:01 | Christian Grothoff | Relationship added | parent of 0008202 |
| 2024-01-23 12:37 | fefe | Relationship added | parent of 0008215 |
| 2024-01-23 13:11 | fefe | Relationship added | parent of 0008218 |
| 2024-01-23 13:12 | fefe | Relationship added | parent of 0008219 |
| 2024-01-23 13:16 | fefe | Relationship added | parent of 0008220 |
| 2024-01-23 13:37 | fefe | Relationship added | parent of 0008221 |
| 2024-01-23 13:53 | fefe | Relationship added | parent of 0008222 |
| 2024-01-24 12:49 | fefe | Relationship added | parent of 0008242 |
| 2024-03-18 22:39 | Christian Grothoff | Target Version | 1.0 => 0.10 |
| 2024-04-02 15:51 | Christian Grothoff | Note Added: 0022086 | |
| 2024-04-05 12:37 | Christian Grothoff | Target Version | 0.10 => 0.11 |
| 2024-04-05 12:59 | Christian Grothoff | Target Version | 0.11 => 0.14 |
| 2024-07-25 21:56 | Christian Grothoff | Target Version | 0.14 => post-1.0 |
| 2025-03-22 13:09 | Christian Grothoff | Category | mechant backend => merchant backend |
| 2025-07-11 20:29 | Christian Grothoff | Assigned To | fefe => oec |
| 2025-12-07 09:53 | Christian Grothoff | Status | assigned => implementing |
| 2026-01-25 16:20 | Christian Grothoff | Target Version | post-1.0 => 1.10 |