[
https://issues.apache.org/jira/browse/CASSANDRA-18505?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jon Meredith updated CASSANDRA-18505:
-------------------------------------
Fix Version/s: 4.0.10
4.1.2
(was: 4.0.x)
(was: 4.1.x)
Since Version: 3.0.0
Source Control Link:
https://github.com/apache/cassandra/commit/ae995eb3d3cc1c98f61db0d071522b6f09443927
Resolution: Fixed
Status: Resolved (was: Ready to Commit)
> NPE when deserializing malformed collections from client
> --------------------------------------------------------
>
> Key: CASSANDRA-18505
> URL: https://issues.apache.org/jira/browse/CASSANDRA-18505
> Project: Cassandra
> Issue Type: Bug
> Components: Messaging/Client
> Reporter: Jon Meredith
> Assignee: Jon Meredith
> Priority: Normal
> Fix For: 4.0.10, 4.1.2, 5.0
>
>
> When deserializing collections sent from the client, if an element in the
> collection is incorrectly serialized, Collections.getValue can return null if
> the length of the element is negative. Currently this isn't detected and
> serialization continues, calling validate and throwing an NPE in serializers
> that don't handle null value buffers.
> Detect the malformed input and throw a better MarshalException so it will be
> converted to an InvalidRequestException for the client.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
