[
https://issues.apache.org/jira/browse/TINKERPOP-3230?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ken Hu closed TINKERPOP-3230.
-----------------------------
Fix Version/s: 3.7.6
3.8.1
Assignee: Ken Hu
Resolution: Fixed
> GraphSON3 deserializer doesn't check for required meta field
> ------------------------------------------------------------
>
> Key: TINKERPOP-3230
> URL: https://issues.apache.org/jira/browse/TINKERPOP-3230
> Project: TinkerPop
> Issue Type: Bug
> Components: io
> Affects Versions: 3.8.0, 3.7.5
> Reporter: Ken Hu
> Assignee: Ken Hu
> Priority: Blocker
> Fix For: 3.7.6, 3.8.1
>
>
> ResponseMessages always contain a meta field inside the result field. So the
> meta field is effectively a required field in the
> [response|https://github.com/apache/tinkerpop/blob/3.7-dev/gremlin-util/src/main/java/org/apache/tinkerpop/gremlin/util/ser/AbstractGraphSONMessageSerializerV2.java#L281].
> The Java deserializer, however, [doesn't check that this field actually
> exists|https://github.com/apache/tinkerpop/blob/3.7-dev/gremlin-util/src/main/java/org/apache/tinkerpop/gremlin/util/ser/AbstractGraphSONMessageSerializerV2.java#L302],
> it simply assumes that it does. This needs to be updated to have an explicit
> check that this field is not null.
> Note: this may apply to other versions of GraphSON and other GLVs. Make sure
> to check and fix all that apply.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
