Pavel Moravec created QPID-5486:
-----------------------------------
Summary: Creating paged queue can overwrite existing qpidd files
Key: QPID-5486
URL: https://issues.apache.org/jira/browse/QPID-5486
Project: Qpid
Issue Type: Bug
Components: C++ Broker
Affects Versions: 0.24
Reporter: Pavel Moravec
Assignee: Pavel Moravec
Priority: Trivial
Description of problem:
When creating paged queue, there is no check whether the file
/var/lib/qpidd/<queue_name> exists or not. Hence it is possible to rewrite
files like "lock" or "systemId" there.
(Severity of the bug depends on importance of these files for the broker, that
apparently is fine to be started with the files overwritten)
Note that creating a file named e.g. "rhm" (that is directory in
/var/lib/qpidd) is disallowed even now.
Version-Release number of selected component (if applicable):
0.27 (current upstream)
How reproducible:
100%
Steps to Reproduce:
qpid-send -a "lock; {create:always, delete:always, node: { x-declare:
{arguments: {'qpid.paging':'True' }}}}"
echo $?
qpid-send -a "systemId; {create:always, delete:always, node: { x-declare:
{arguments: {'qpid.paging':'True' }}}}"
echo $?
Actual results:
0
0
Expected results:
Both should return an error like:
qpid-send: framing-error: Attempting to re-write file
/home/pmoravec/.qpidd/systemId for paged queue "systemId"
(/home/pmoravec/qpid-trunk/qpid/cpp/src/qpid/sys/posix/MemoryMappedFile.cpp:68)
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org
For additional commands, e-mail: dev-h...@qpid.apache.org
