Ken Hu created TINKERPOP-3230:
---------------------------------
Summary: GraphSON3 deserializer doesn't check for required meta
field
Key: TINKERPOP-3230
URL: https://issues.apache.org/jira/browse/TINKERPOP-3230
Project: TinkerPop
Issue Type: Bug
Components: io
Affects Versions: 3.7.5, 3.8.0
Reporter: Ken Hu
ResponseMessages always contain a meta field inside the result field. So the
meta field is effectively a required field in the
[response|https://github.com/apache/tinkerpop/blob/3.7-dev/gremlin-util/src/main/java/org/apache/tinkerpop/gremlin/util/ser/AbstractGraphSONMessageSerializerV2.java#L281].
The Java deserializer, however, [doesn't check that this field actually
exists|https://github.com/apache/tinkerpop/blob/3.7-dev/gremlin-util/src/main/java/org/apache/tinkerpop/gremlin/util/ser/AbstractGraphSONMessageSerializerV2.java#L302],
it simply assumes that it does. This needs to be updated to have an explicit
check that this field is not null.
Note: this may apply to other versions of GraphSON and other GLVs. Make sure to
check and fix all that apply.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
