Invalid query parameter could lead to HTTP 500
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Cinder |
Fix Released
|
Undecided
|
TommyLike | ||
OpenStack Compute (nova) |
Fix Released
|
Undecided
|
Zhenyu Zheng | ||
OpenStack Shared File Systems Service (Manila) |
Fix Released
|
Undecided
|
zhongjun |
Bug Description
Invalid query parameter could lead to HTTP 500, although Nova used JSON Schema verification
to check input query params, but query like:
GET /servers?limit=%88 will still lead to HTTP 500, as it failed to parse at webob which is
pre JSON Schema check.
GET http://
Response:
{
"computeFault": {
"message": "Unexpected API Error. Please report this at http://
"code": 500
}
}
Traceback:
DEBUG nova.api.
Jan 30 17:46:56 kevin-dev <email address hidden>[4374]: ERROR nova.api.
Jan 30 17:46:56 kevin-dev <email address hidden>[4374]: ERROR nova.api.
Jan 30 17:46:56 kevin-dev <email address hidden>[4374]: ERROR nova.api.
Jan 30 17:46:56 kevin-dev <email address hidden>[4374]: ERROR nova.api.
Jan 30 17:46:56 kevin-dev <email address hidden>[4374]: ERROR nova.api.
Jan 30 17:46:56 kevin-dev <email address hidden>[4374]: ERROR nova.api.
Jan 30 17:46:56 kevin-dev <email address hidden>[4374]: ERROR nova.api.
Jan 30 17:46:56 kevin-dev <email address hidden>[4374]: ERROR nova.api.
Jan 30 17:46:56 kevin-dev <email address hidden>[4374]: ERROR nova.api.
Jan 30 17:46:56 kevin-dev <email address hidden>[4374]: ERROR nova.api.
Jan 30 17:46:56 kevin-dev <email address hidden>[4374]: ERROR nova.api.
Jan 30 17:46:56 kevin-dev <email address hidden>[4374]: ERROR nova.api.
Jan 30 17:46:56 kevin-dev <email address hidden>[4374]: ERROR nova.api.
Jan 30 17:46:56 kevin-dev <email address hidden>[4374]: ERROR nova.api.
Jan 30 17:46:56 kevin-dev <email address hidden>[4374]: ERROR nova.api.
Jan 30 17:46:56 kevin-dev <email address hidden>[4374]: ERROR nova.api.
Jan 30 17:46:56 kevin-dev <email address hidden>[4374]: ERROR nova.api.
Jan 30 17:46:56 kevin-dev <email address hidden>[4374]: ERROR nova.api.
Jan 30 17:46:56 kevin-dev <email address hidden>[4374]: INFO nova.api.
Jan 30 17:46:56 kevin-dev <email address hidden>[4374]: <type 'exceptions.
Jan 30 17:46:56 kevin-dev <email address hidden>[4374]: DEBUG nova.api.
Jan 30 17:46:56 kevin-dev <email address hidden>[4374]: <type 'exceptions.
Jan 30 17:46:56 kevin-dev <email address hidden>[4374]: INFO nova.api.
Changed in nova: | |
assignee: | nobody → Zhenyu Zheng (zhengzhenyu) |
Changed in nova: | |
status: | New → In Progress |
affects: | nova → cinder |
affects: | cinder → nova |
Changed in cinder: | |
assignee: | nobody → TommyLike (hu-husheng) |
Changed in manila: | |
assignee: | nobody → zhongjun (jun-zhongjun) |
Changed in nova: | |
assignee: | Yikun Jiang (yikunkero) → Zhenyu Zheng (zhengzhenyu) |
Changed in manila: | |
milestone: | none → queens-rc1 |
Patch for Nova: https:/ /review. openstack. org/#/c/ 539164