[ https://issues.apache.org/jira/browse/CLOUDSTACK-9141?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15053380#comment-15053380 ]
ASF GitHub Bot commented on CLOUDSTACK-9141: -------------------------------------------- Github user remibergsma commented on the pull request: https://github.com/apache/cloudstack/pull/1220#issuecomment-164021612 @wido please have a look: ``` [ERROR] COMPILATION ERROR : [INFO] ------------------------------------------------------------- [ERROR] /home/jenkins/jenkins-slave/workspace/cloudstack-pull-analysis/api/src/org/apache/cloudstack/api/command/user/vm/DeployVMCmd.java:[63,16] error: cannot find symbol [ERROR] symbol: class Base64 ``` > Userdata is not validated for valid base64 > ------------------------------------------ > > Key: CLOUDSTACK-9141 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-9141 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: API > Affects Versions: 4.6.0, 4.7.0 > Reporter: Wido den Hollander > > Currently the userdata passed to "deployvirtualmachine" is not verified if it > is valid base64. > It is passed all the way down the the VR without validating if it is correct > base64. > We simple check if it is valid should be done in the management server before > attempting a deployment. -- This message was sent by Atlassian JIRA (v6.3.4#6332)