Public bug reported:
We could be more thorough in santizing some of the input parameters that
the server-side runtime passes to the provider implementation. For
example, we could check the size parameter that is passed to
CreateFile() and Update() to make sure that it is non-negative and
return an error if not. This would relieve each provider implementation
from redundantly implementing the check.
There are probably other checks we could implement in the runtime, such
as that a name or id is non-empty, or that source and target for a move
or copy are not the same.
** Affects: storage-framework (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1677133
Title:
Need to sanitize parameters on the server side
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/storage-framework/+bug/1677133/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
