[ https://issues.apache.org/jira/browse/IGNITE-13300?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17166172#comment-17166172 ]
Ignite TC Bot commented on IGNITE-13300: ---------------------------------------- {panel:title=Branch: [pull/8084/head] Base: [master] : No blockers found!|borderStyle=dashed|borderColor=#ccc|titleBGColor=#D6F7C1}{panel} {panel:title=Branch: [pull/8084/head] Base: [master] : New Tests (12)|borderStyle=dashed|borderColor=#ccc|titleBGColor=#D6F7C1} {color:#00008b}Service Grid (legacy mode){color} [[tests 4|https://ci.ignite.apache.org/viewLog.html?buildId=5493337]] * {color:#013220}IgniteServiceGridTestSuite: ServiceDeploymentProcessIdSelfTest.topologyVersion[Test event=IgniteBiTuple [val1=DiscoveryEvent [evtNode=b9ae7d8f-be45-4e7f-82f3-64ed89f527b4, topVer=0, msgTemplate=null, span=null, nodeId8=0e52e40b, msg=, type=NODE_JOINED, tstamp=1595846685869], val2=AffinityTopologyVersion [topVer=8292958128010032154, minorTopVer=0]]] - PASSED{color} * {color:#013220}IgniteServiceGridTestSuite: ServiceDeploymentProcessIdSelfTest.requestId[Test event=IgniteBiTuple [val1=DiscoveryEvent [evtNode=b9ae7d8f-be45-4e7f-82f3-64ed89f527b4, topVer=0, msgTemplate=null, span=null, nodeId8=0e52e40b, msg=, type=NODE_JOINED, tstamp=1595846685869], val2=AffinityTopologyVersion [topVer=8292958128010032154, minorTopVer=0]]] - PASSED{color} * {color:#013220}IgniteServiceGridTestSuite: ServiceDeploymentProcessIdSelfTest.topologyVersion[Test event=IgniteBiTuple [val1=DiscoveryCustomEvent [customMsg=ServiceChangeBatchRequest [id=1b4ffdf8371-a65f7e8e-de9a-4e12-a528-5248bf27023e, reqs=SingletonList [ServiceUndeploymentRequest []]], affTopVer=null, super=DiscoveryEvent [evtNode=37000a16-f9ac-479c-b8f9-7741d780a2c2, topVer=0, msgTemplate=null, span=null, nodeId8=37000a16, msg=null, type=DISCOVERY_CUSTOM_EVT, tstamp=1595846685869]], val2=AffinityTopologyVersion [topVer=-7665357655435093363, minorTopVer=0]]] - PASSED{color} * {color:#013220}IgniteServiceGridTestSuite: ServiceDeploymentProcessIdSelfTest.requestId[Test event=IgniteBiTuple [val1=DiscoveryCustomEvent [customMsg=ServiceChangeBatchRequest [id=1b4ffdf8371-a65f7e8e-de9a-4e12-a528-5248bf27023e, reqs=SingletonList [ServiceUndeploymentRequest []]], affTopVer=null, super=DiscoveryEvent [evtNode=37000a16-f9ac-479c-b8f9-7741d780a2c2, topVer=0, msgTemplate=null, span=null, nodeId8=37000a16, msg=null, type=DISCOVERY_CUSTOM_EVT, tstamp=1595846685869]], val2=AffinityTopologyVersion [topVer=-7665357655435093363, minorTopVer=0]]] - PASSED{color} {color:#00008b}Service Grid{color} [[tests 4|https://ci.ignite.apache.org/viewLog.html?buildId=5493336]] * {color:#013220}IgniteServiceGridTestSuite: ServiceDeploymentProcessIdSelfTest.topologyVersion[Test event=IgniteBiTuple [val1=DiscoveryEvent [evtNode=da30916c-3270-4d54-91af-628c39db2c3b, topVer=0, msgTemplate=null, span=null, nodeId8=1e82feac, msg=, type=NODE_JOINED, tstamp=1595846571942], val2=AffinityTopologyVersion [topVer=1614076897849802316, minorTopVer=0]]] - PASSED{color} * {color:#013220}IgniteServiceGridTestSuite: ServiceDeploymentProcessIdSelfTest.requestId[Test event=IgniteBiTuple [val1=DiscoveryEvent [evtNode=da30916c-3270-4d54-91af-628c39db2c3b, topVer=0, msgTemplate=null, span=null, nodeId8=1e82feac, msg=, type=NODE_JOINED, tstamp=1595846571942], val2=AffinityTopologyVersion [topVer=1614076897849802316, minorTopVer=0]]] - PASSED{color} * {color:#013220}IgniteServiceGridTestSuite: ServiceDeploymentProcessIdSelfTest.topologyVersion[Test event=IgniteBiTuple [val1=DiscoveryCustomEvent [customMsg=ServiceChangeBatchRequest [id=a5aa8ef8371-a2845bbf-08f3-4fed-baaf-f295be021297, reqs=SingletonList [ServiceUndeploymentRequest []]], affTopVer=null, super=DiscoveryEvent [evtNode=64ce1365-84e5-4e81-975c-4cb4d348a638, topVer=0, msgTemplate=null, span=null, nodeId8=64ce1365, msg=null, type=DISCOVERY_CUSTOM_EVT, tstamp=1595846571942]], val2=AffinityTopologyVersion [topVer=8958066144825306395, minorTopVer=0]]] - PASSED{color} * {color:#013220}IgniteServiceGridTestSuite: ServiceDeploymentProcessIdSelfTest.requestId[Test event=IgniteBiTuple [val1=DiscoveryCustomEvent [customMsg=ServiceChangeBatchRequest [id=a5aa8ef8371-a2845bbf-08f3-4fed-baaf-f295be021297, reqs=SingletonList [ServiceUndeploymentRequest []]], affTopVer=null, super=DiscoveryEvent [evtNode=64ce1365-84e5-4e81-975c-4cb4d348a638, topVer=0, msgTemplate=null, span=null, nodeId8=64ce1365, msg=null, type=DISCOVERY_CUSTOM_EVT, tstamp=1595846571942]], val2=AffinityTopologyVersion [topVer=8958066144825306395, minorTopVer=0]]] - PASSED{color} {color:#00008b}Security{color} [[tests 4|https://ci.ignite.apache.org/viewLog.html?buildId=5493352]] * {color:#013220}SecurityTestSuite: PrivilegedProxyTest.testPrivelegedUserObject - PASSED{color} * {color:#013220}SecurityTestSuite: IgniteOperationsInsideSandboxTest.testAffinity - PASSED{color} * {color:#013220}SecurityTestSuite: IgniteOperationsInsideSandboxTest.testBinary - PASSED{color} * {color:#013220}SecurityTestSuite: IgniteOperationsInsideSandboxTest.testDataStructures - PASSED{color} {panel} [TeamCity *--> Run :: All* Results|https://ci.ignite.apache.org/viewLog.html?buildId=5493359&buildTypeId=IgniteTests24Java8_RunAll] > Ignite sandbox vulnerability allows to execute user code in privileged proxy > ---------------------------------------------------------------------------- > > Key: IGNITE-13300 > URL: https://issues.apache.org/jira/browse/IGNITE-13300 > Project: Ignite > Issue Type: Bug > Components: security > Affects Versions: 2.9 > Reporter: Aleksey Plekhanov > Assignee: Aleksey Plekhanov > Priority: Critical > Labels: iep-38, sandbox > Time Spent: 10m > Remaining Estimate: 0h > > Ignite sandbox returns a privileged proxy for Ignite and some other system > interfaces. If the user implements one of these interfaces and gets via > privileged proxy an instance of implemented class, privileged proxy for user > class will be returned. > Reproducer: > {code:java} > public class PrivilegedProxyTest extends AbstractSandboxTest { > public void testPrivelegedUserObject() throws Exception { > > grid(CLNT_FORBIDDEN_WRITE_PROP).getOrCreateCache(DEFAULT_CACHE_NAME).put(0, > new TestIterator<>()); > runForbiddenOperation(() -> > grid(CLNT_FORBIDDEN_WRITE_PROP).compute().run(() -> { > GridIterator<?> it = > (GridIterator<?>)Ignition.localIgnite().cache(DEFAULT_CACHE_NAME).get(0); > it.iterator(); > }), AccessControlException.class); > } > public static class TestIterator<T> extends GridIterableAdapter<T> { > public TestIterator() { > super(Collections.emptyIterator()); > } > @Override public GridIterator<T> iterator() { > controlAction(); > return super.iterator(); > } > } > } > {code} -- This message was sent by Atlassian Jira (v8.3.4#803005)