[
https://issues.apache.org/jira/browse/IGNITE-13300?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17166172#comment-17166172
]
Ignite TC Bot commented on IGNITE-13300:
----------------------------------------
{panel:title=Branch: [pull/8084/head] Base: [master] : No blockers
found!|borderStyle=dashed|borderColor=#ccc|titleBGColor=#D6F7C1}{panel}
{panel:title=Branch: [pull/8084/head] Base: [master] : New Tests
(12)|borderStyle=dashed|borderColor=#ccc|titleBGColor=#D6F7C1}
{color:#00008b}Service Grid (legacy mode){color} [[tests
4|https://ci.ignite.apache.org/viewLog.html?buildId=5493337]]
* {color:#013220}IgniteServiceGridTestSuite:
ServiceDeploymentProcessIdSelfTest.topologyVersion[Test event=IgniteBiTuple
[val1=DiscoveryEvent [evtNode=b9ae7d8f-be45-4e7f-82f3-64ed89f527b4, topVer=0,
msgTemplate=null, span=null, nodeId8=0e52e40b, msg=, type=NODE_JOINED,
tstamp=1595846685869], val2=AffinityTopologyVersion
[topVer=8292958128010032154, minorTopVer=0]]] - PASSED{color}
* {color:#013220}IgniteServiceGridTestSuite:
ServiceDeploymentProcessIdSelfTest.requestId[Test event=IgniteBiTuple
[val1=DiscoveryEvent [evtNode=b9ae7d8f-be45-4e7f-82f3-64ed89f527b4, topVer=0,
msgTemplate=null, span=null, nodeId8=0e52e40b, msg=, type=NODE_JOINED,
tstamp=1595846685869], val2=AffinityTopologyVersion
[topVer=8292958128010032154, minorTopVer=0]]] - PASSED{color}
* {color:#013220}IgniteServiceGridTestSuite:
ServiceDeploymentProcessIdSelfTest.topologyVersion[Test event=IgniteBiTuple
[val1=DiscoveryCustomEvent [customMsg=ServiceChangeBatchRequest
[id=1b4ffdf8371-a65f7e8e-de9a-4e12-a528-5248bf27023e, reqs=SingletonList
[ServiceUndeploymentRequest []]], affTopVer=null, super=DiscoveryEvent
[evtNode=37000a16-f9ac-479c-b8f9-7741d780a2c2, topVer=0, msgTemplate=null,
span=null, nodeId8=37000a16, msg=null, type=DISCOVERY_CUSTOM_EVT,
tstamp=1595846685869]], val2=AffinityTopologyVersion
[topVer=-7665357655435093363, minorTopVer=0]]] - PASSED{color}
* {color:#013220}IgniteServiceGridTestSuite:
ServiceDeploymentProcessIdSelfTest.requestId[Test event=IgniteBiTuple
[val1=DiscoveryCustomEvent [customMsg=ServiceChangeBatchRequest
[id=1b4ffdf8371-a65f7e8e-de9a-4e12-a528-5248bf27023e, reqs=SingletonList
[ServiceUndeploymentRequest []]], affTopVer=null, super=DiscoveryEvent
[evtNode=37000a16-f9ac-479c-b8f9-7741d780a2c2, topVer=0, msgTemplate=null,
span=null, nodeId8=37000a16, msg=null, type=DISCOVERY_CUSTOM_EVT,
tstamp=1595846685869]], val2=AffinityTopologyVersion
[topVer=-7665357655435093363, minorTopVer=0]]] - PASSED{color}
{color:#00008b}Service Grid{color} [[tests
4|https://ci.ignite.apache.org/viewLog.html?buildId=5493336]]
* {color:#013220}IgniteServiceGridTestSuite:
ServiceDeploymentProcessIdSelfTest.topologyVersion[Test event=IgniteBiTuple
[val1=DiscoveryEvent [evtNode=da30916c-3270-4d54-91af-628c39db2c3b, topVer=0,
msgTemplate=null, span=null, nodeId8=1e82feac, msg=, type=NODE_JOINED,
tstamp=1595846571942], val2=AffinityTopologyVersion
[topVer=1614076897849802316, minorTopVer=0]]] - PASSED{color}
* {color:#013220}IgniteServiceGridTestSuite:
ServiceDeploymentProcessIdSelfTest.requestId[Test event=IgniteBiTuple
[val1=DiscoveryEvent [evtNode=da30916c-3270-4d54-91af-628c39db2c3b, topVer=0,
msgTemplate=null, span=null, nodeId8=1e82feac, msg=, type=NODE_JOINED,
tstamp=1595846571942], val2=AffinityTopologyVersion
[topVer=1614076897849802316, minorTopVer=0]]] - PASSED{color}
* {color:#013220}IgniteServiceGridTestSuite:
ServiceDeploymentProcessIdSelfTest.topologyVersion[Test event=IgniteBiTuple
[val1=DiscoveryCustomEvent [customMsg=ServiceChangeBatchRequest
[id=a5aa8ef8371-a2845bbf-08f3-4fed-baaf-f295be021297, reqs=SingletonList
[ServiceUndeploymentRequest []]], affTopVer=null, super=DiscoveryEvent
[evtNode=64ce1365-84e5-4e81-975c-4cb4d348a638, topVer=0, msgTemplate=null,
span=null, nodeId8=64ce1365, msg=null, type=DISCOVERY_CUSTOM_EVT,
tstamp=1595846571942]], val2=AffinityTopologyVersion
[topVer=8958066144825306395, minorTopVer=0]]] - PASSED{color}
* {color:#013220}IgniteServiceGridTestSuite:
ServiceDeploymentProcessIdSelfTest.requestId[Test event=IgniteBiTuple
[val1=DiscoveryCustomEvent [customMsg=ServiceChangeBatchRequest
[id=a5aa8ef8371-a2845bbf-08f3-4fed-baaf-f295be021297, reqs=SingletonList
[ServiceUndeploymentRequest []]], affTopVer=null, super=DiscoveryEvent
[evtNode=64ce1365-84e5-4e81-975c-4cb4d348a638, topVer=0, msgTemplate=null,
span=null, nodeId8=64ce1365, msg=null, type=DISCOVERY_CUSTOM_EVT,
tstamp=1595846571942]], val2=AffinityTopologyVersion
[topVer=8958066144825306395, minorTopVer=0]]] - PASSED{color}
{color:#00008b}Security{color} [[tests
4|https://ci.ignite.apache.org/viewLog.html?buildId=5493352]]
* {color:#013220}SecurityTestSuite:
PrivilegedProxyTest.testPrivelegedUserObject - PASSED{color}
* {color:#013220}SecurityTestSuite:
IgniteOperationsInsideSandboxTest.testAffinity - PASSED{color}
* {color:#013220}SecurityTestSuite:
IgniteOperationsInsideSandboxTest.testBinary - PASSED{color}
* {color:#013220}SecurityTestSuite:
IgniteOperationsInsideSandboxTest.testDataStructures - PASSED{color}
{panel}
[TeamCity *--> Run :: All*
Results|https://ci.ignite.apache.org/viewLog.html?buildId=5493359&buildTypeId=IgniteTests24Java8_RunAll]
> Ignite sandbox vulnerability allows to execute user code in privileged proxy
> ----------------------------------------------------------------------------
>
> Key: IGNITE-13300
> URL: https://issues.apache.org/jira/browse/IGNITE-13300
> Project: Ignite
> Issue Type: Bug
> Components: security
> Affects Versions: 2.9
> Reporter: Aleksey Plekhanov
> Assignee: Aleksey Plekhanov
> Priority: Critical
> Labels: iep-38, sandbox
> Time Spent: 10m
> Remaining Estimate: 0h
>
> Ignite sandbox returns a privileged proxy for Ignite and some other system
> interfaces. If the user implements one of these interfaces and gets via
> privileged proxy an instance of implemented class, privileged proxy for user
> class will be returned.
> Reproducer:
> {code:java}
> public class PrivilegedProxyTest extends AbstractSandboxTest {
> public void testPrivelegedUserObject() throws Exception {
>
> grid(CLNT_FORBIDDEN_WRITE_PROP).getOrCreateCache(DEFAULT_CACHE_NAME).put(0,
> new TestIterator<>());
> runForbiddenOperation(() ->
> grid(CLNT_FORBIDDEN_WRITE_PROP).compute().run(() -> {
> GridIterator<?> it =
> (GridIterator<?>)Ignition.localIgnite().cache(DEFAULT_CACHE_NAME).get(0);
> it.iterator();
> }), AccessControlException.class);
> }
> public static class TestIterator<T> extends GridIterableAdapter<T> {
> public TestIterator() {
> super(Collections.emptyIterator());
> }
> @Override public GridIterator<T> iterator() {
> controlAction();
> return super.iterator();
> }
> }
> }
> {code}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
