[
https://issues.apache.org/jira/browse/TINKERPOP-3230?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18069748#comment-18069748
]
Ken Hu commented on TINKERPOP-3230:
-----------------------------------
CTR
https://github.com/apache/tinkerpop/commit/fde92e7792f1cc6a170c6564cbb7ee4331685dbb
> GraphSON3 deserializer doesn't check for required meta field
> ------------------------------------------------------------
>
> Key: TINKERPOP-3230
> URL: https://issues.apache.org/jira/browse/TINKERPOP-3230
> Project: TinkerPop
> Issue Type: Bug
> Components: io
> Affects Versions: 3.8.0, 3.7.5
> Reporter: Ken Hu
> Priority: Blocker
>
> ResponseMessages always contain a meta field inside the result field. So the
> meta field is effectively a required field in the
> [response|https://github.com/apache/tinkerpop/blob/3.7-dev/gremlin-util/src/main/java/org/apache/tinkerpop/gremlin/util/ser/AbstractGraphSONMessageSerializerV2.java#L281].
> The Java deserializer, however, [doesn't check that this field actually
> exists|https://github.com/apache/tinkerpop/blob/3.7-dev/gremlin-util/src/main/java/org/apache/tinkerpop/gremlin/util/ser/AbstractGraphSONMessageSerializerV2.java#L302],
> it simply assumes that it does. This needs to be updated to have an explicit
> check that this field is not null.
> Note: this may apply to other versions of GraphSON and other GLVs. Make sure
> to check and fix all that apply.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
