View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0008346 | Taler | merchant backend | public | 2024-02-07 13:19 | 2024-03-07 19:47 |
| Reporter | mikolai | Assigned To | Christian Grothoff | Resolution deadline | |
| Implementer | Reviewer | ||||
| Release signed by | Deployed by | ||||
| Verifier | Communicator | ||||
| Data protection authority notification required | No | ||||
| CSIRT notification required | No | ||||
| Estimated effort (hours) | Actual effort (hours) | 0 | |||
| Fast-track | No | ||||
| Work package | none | ||||
| Priority | normal | Severity | crash | Reproducibility | always |
| Status | closed | Resolution | fixed | ||
| Product Version | git (master) | ||||
| Target Version | 0.9.4 | Fixed in Version | 0.9.4 | ||
| Summary | 0008346: merchant backend crash on malformed client JSON | ||||
| Description | send a POST request to pay for an existing and claimed order at `orders/<order_id>/pay` whenever `coins[*]/ub_sig/cipher` from https://docs.taler.net/core/api-common.html#tsref-type-CoinEnvelope is missing or contains an invalid value (tested with "RSA1" instead of "RSA"), the merchant backend crashes with ``` Feb 07 13:05:32 1561dc32958c taler-merchant-httpd[934]: {}2024-02-07T13:05:32.176067+0000 taler-merchant-httpd-934(8F0XQV3P6JRNFAE56R5M658RGC) WARNING External protocol violation detected at json_helper.c:862. Feb 07 13:05:32 1561dc32958c taler-merchant-httpd[934]: 2024-02-07T13:05:32.176128+0000 taler-merchant-httpd-934(8F0XQV3P6JRNFAE56R5M658RGC) WARNING External protocol violation detected at taler-merchant-httpd_post-orders-ID-pay.c:2820. Feb 07 13:05:32 1561dc32958c taler-merchant-httpd[934]: 2024-02-07T13:05:32.176143+0000 taler-merchant-httpd-934(8F0XQV3P6JRNFAE56R5M658RGC) ERROR Assertion failed at taler-merchant-httpd_post-orders-ID-pay.c:2842. Aborting. ``` expected result: merchant backend should not crash, but return a 400 Bad Request | ||||
| Tags | No tags attached. | ||||
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2024-02-07 13:19 | mikolai | New Issue | |
| 2024-02-07 13:19 | mikolai | Status | new => assigned |
| 2024-02-07 13:19 | mikolai | Assigned To | => Christian Grothoff |
| 2024-02-07 13:32 | Christian Grothoff | Status | assigned => informing |
| 2024-02-07 13:32 | Christian Grothoff | Resolution | open => fixed |
| 2024-02-07 13:32 | Christian Grothoff | Fixed in Version | => 0.9.4 |
| 2024-02-07 13:32 | Christian Grothoff | Note Added: 0021195 | |
| 2024-02-07 13:32 | Christian Grothoff | Product Version | 0.9.4 => git (master) |
| 2024-02-07 13:32 | Christian Grothoff | Target Version | => 0.9.4 |
| 2024-02-07 13:32 | Christian Grothoff | Note Added: 0021196 | |
| 2024-03-07 19:47 | Christian Grothoff | Status | informing => closed |
| 2025-03-22 13:09 | Christian Grothoff | Category | mechant backend => merchant backend |