You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cassandra.apache.org by "Josh McKenzie (Jira)" <ji...@apache.org> on 2020/04/18 12:37:00 UTC

[jira] [Updated] (CASSANDRA-13646) Bind parameters of collection types are not properly validated

     [ https://issues.apache.org/jira/browse/CASSANDRA-13646?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Josh McKenzie updated CASSANDRA-13646:
--------------------------------------
    Bug Category: Parent values: Correctness(12982)Level 1 values: API / Semantic Implementation(12988)

> Bind parameters of collection types are not properly validated
> --------------------------------------------------------------
>
>                 Key: CASSANDRA-13646
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-13646
>             Project: Cassandra
>          Issue Type: Bug
>            Reporter: Benjamin Lerer
>            Assignee: Benjamin Lerer
>            Priority: Normal
>             Fix For: 2.2.11, 3.0.15, 3.11.1, 4.0
>
>
> It looks like C* is not validating properly the bind parameters for collection types. If an element of the collection is invalid the value will not be rejected and might cause an Exception later on.
> The problem can be reproduced with the following test:
> {code}
>     @Test
>     public void testInvalidQueries() throws Throwable
>     {
>         createTable("CREATE TABLE %s (k int PRIMARY KEY, s frozen<set<tuple<int, text, double>>>)");
>         execute("INSERT INTO %s (k, s) VALUES (0, ?)", set(tuple(1,"1",1.0,1), tuple(2,"2",2.0,2)));
>     }
> {code}
> The invalid Tuple will cause an "IndexOutOfBoundsException: Index: 3, Size: 3"



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org