Re: [Django] #30769: Access JSON key crashes when using annotated field from subquery.

[Django]

#30769: Access JSON key crashes when using annotated field from subquery.
-+-
 Reporter:  Tim Kleinschmidt |Owner:  Simon
 |  Charette
 Type:  Bug  |   Status:  closed
Component:  Database layer   |  Version:  1.11
  (models, ORM)  |
 Severity:  Release blocker  |   Resolution:  fixed
 Keywords:   | Triage Stage:  Accepted
Has patch:  1|  Needs documentation:  0
  Needs tests:  0|  Patch needs improvement:  0
Easy pickings:  0|UI/UX:  0
-+-

Comment (by Mariusz Felisiak ):

 In [changeset:"fd393907c91e855acbd6f7a287bdc8e951c328e8" fd39390]:
 {{{
 #!CommitTicketReference repository=""
 revision="fd393907c91e855acbd6f7a287bdc8e951c328e8"
 [1.11.x] Fixed #30769 -- Fixed a crash when filtering against a subquery
 JSON/HStoreField annotation.

 This was a regression introduced by
 7deeabc7c7526786df6894429ce89a9c4b614086
 to address CVE-2019-14234.

 Thanks Tim Kleinschmidt for the report and Mariusz for the tests.

 Backport of 6c3dfba89215fc56fc27ef61829a6fff88be4abb from master.
 }}}

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/064.1c157414215200fda2fc35179b358a37%40djangoproject.com.

Re: [Django] #30769: Access JSON key crashes when using annotated field from subquery.

[Django]

#30769: Access JSON key crashes when using annotated field from subquery.
-+-
 Reporter:  Tim Kleinschmidt |Owner:  Simon
 |  Charette
 Type:  Bug  |   Status:  closed
Component:  Database layer   |  Version:  1.11
  (models, ORM)  |
 Severity:  Release blocker  |   Resolution:  fixed
 Keywords:   | Triage Stage:  Accepted
Has patch:  1|  Needs documentation:  0
  Needs tests:  0|  Patch needs improvement:  0
Easy pickings:  0|UI/UX:  0
-+-

Comment (by Mariusz Felisiak ):

 In [changeset:"db181f4b7ceac2a7050d462224bf5109dcd4790d" db181f4]:
 {{{
 #!CommitTicketReference repository=""
 revision="db181f4b7ceac2a7050d462224bf5109dcd4790d"
 [2.1.x] Fixed #30769 -- Fixed a crash when filtering against a subquery
 JSON/HStoreField annotation.

 This was a regression introduced by
 7deeabc7c7526786df6894429ce89a9c4b614086
 to address CVE-2019-14234.

 Thanks Tim Kleinschmidt for the report and Mariusz for the tests.

 Backport of 6c3dfba89215fc56fc27ef61829a6fff88be4abb from master.
 }}}

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/064.5f970c256e276e895068cc73f49ffa06%40djangoproject.com.

Re: [Django] #30769: Access JSON key crashes when using annotated field from subquery.

[Django]

#30769: Access JSON key crashes when using annotated field from subquery.
-+-
 Reporter:  Tim Kleinschmidt |Owner:  Simon
 |  Charette
 Type:  Bug  |   Status:  closed
Component:  Database layer   |  Version:  1.11
  (models, ORM)  |
 Severity:  Release blocker  |   Resolution:  fixed
 Keywords:   | Triage Stage:  Accepted
Has patch:  1|  Needs documentation:  0
  Needs tests:  0|  Patch needs improvement:  0
Easy pickings:  0|UI/UX:  0
-+-

Comment (by Mariusz Felisiak ):

 In [changeset:"7806e4545452ae36c71d41c2b9b35f6e15df7b58" 7806e45]:
 {{{
 #!CommitTicketReference repository=""
 revision="7806e4545452ae36c71d41c2b9b35f6e15df7b58"
 [2.2.x] Fixed #30769 -- Fixed a crash when filtering against a subquery
 JSON/HStoreField annotation.

 This was a regression introduced by
 7deeabc7c7526786df6894429ce89a9c4b614086
 to address CVE-2019-14234.

 Thanks Tim Kleinschmidt for the report and Mariusz for the tests.

 Backport of 6c3dfba89215fc56fc27ef61829a6fff88be4abb from master
 }}}

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/064.31c0389748e2379240b216d6d251cfc8%40djangoproject.com.

Re: [Django] #30769: Access JSON key crashes when using annotated field from subquery.

[Django]

#30769: Access JSON key crashes when using annotated field from subquery.
-+-
 Reporter:  Tim Kleinschmidt |Owner:  Simon
 |  Charette
 Type:  Bug  |   Status:  closed
Component:  Database layer   |  Version:  1.11
  (models, ORM)  |
 Severity:  Release blocker  |   Resolution:  fixed
 Keywords:   | Triage Stage:  Accepted
Has patch:  1|  Needs documentation:  0
  Needs tests:  0|  Patch needs improvement:  0
Easy pickings:  0|UI/UX:  0
-+-

Comment (by Mariusz Felisiak ):

 In [changeset:"574154ef56d432d5b3bb024e7a08880e53755f3d" 574154e]:
 {{{
 #!CommitTicketReference repository=""
 revision="574154ef56d432d5b3bb024e7a08880e53755f3d"
 [3.0.x] Fixed #30769 -- Fixed a crash when filtering against a subquery
 JSON/HStoreField annotation.

 This was a regression introduced by
 7deeabc7c7526786df6894429ce89a9c4b614086
 to address CVE-2019-14234.

 Thanks Tim Kleinschmidt for the report and Mariusz for the tests.

 Backport of 6c3dfba89215fc56fc27ef61829a6fff88be4abb from master
 }}}

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/064.821915d936577a2eafebc69072d8c2f9%40djangoproject.com.

Re: [Django] #30769: Access JSON key crashes when using annotated field from subquery.

[Django]

#30769: Access JSON key crashes when using annotated field from subquery.
-+-
 Reporter:  Tim Kleinschmidt |Owner:  Simon
 |  Charette
 Type:  Bug  |   Status:  closed
Component:  Database layer   |  Version:  1.11
  (models, ORM)  |
 Severity:  Release blocker  |   Resolution:  fixed
 Keywords:   | Triage Stage:  Accepted
Has patch:  1|  Needs documentation:  0
  Needs tests:  0|  Patch needs improvement:  0
Easy pickings:  0|UI/UX:  0
-+-
Changes (by Mariusz Felisiak ):

 * status:  assigned => closed
 * resolution:   => fixed


Comment:

 In [changeset:"6c3dfba89215fc56fc27ef61829a6fff88be4abb" 6c3dfba]:
 {{{
 #!CommitTicketReference repository=""
 revision="6c3dfba89215fc56fc27ef61829a6fff88be4abb"
 Fixed #30769 -- Fixed a crash when filtering against a subquery
 JSON/HStoreField annotation.

 This was a regression introduced by
 7deeabc7c7526786df6894429ce89a9c4b614086
 to address CVE-2019-14234.

 Thanks Tim Kleinschmidt for the report and Mariusz for the tests.
 }}}

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/064.132727f4acdecf35a00313928d33c39e%40djangoproject.com.

Re: [Django] #30769: Access JSON key crashes when using annotated field from subquery.

[Django]

#30769: Access JSON key crashes when using annotated field from subquery.
-+-
 Reporter:  Tim Kleinschmidt |Owner:  Simon
 |  Charette
 Type:  Bug  |   Status:  assigned
Component:  Database layer   |  Version:  1.11
  (models, ORM)  |
 Severity:  Release blocker  |   Resolution:
 Keywords:   | Triage Stage:  Accepted
Has patch:  1|  Needs documentation:  0
  Needs tests:  0|  Patch needs improvement:  0
Easy pickings:  0|UI/UX:  0
-+-
Changes (by Simon Charette):

 * has_patch:  0 => 1


-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/064.4fae4691f625714c4c57739326dc183b%40djangoproject.com.

Re: [Django] #30769: Access JSON key crashes when using annotated field from subquery.

[Django]

#30769: Access JSON key crashes when using annotated field from subquery.
-+-
 Reporter:  Tim Kleinschmidt |Owner:  Simon
 |  Charette
 Type:  Bug  |   Status:  assigned
Component:  Database layer   |  Version:  1.11
  (models, ORM)  |
 Severity:  Release blocker  |   Resolution:
 Keywords:   | Triage Stage:  Accepted
Has patch:  0|  Needs documentation:  0
  Needs tests:  0|  Patch needs improvement:  0
Easy pickings:  0|UI/UX:  0
-+-
Changes (by Simon Charette):

 * owner:  nobody => Simon Charette
 * status:  new => assigned


-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/064.417e0ce8726ed4a1cccbf569e6434eb5%40djangoproject.com.

Re: [Django] #30769: Access JSON key crashes when using annotated field from subquery.

[Django]

#30769: Access JSON key crashes when using annotated field from subquery.
-+-
 Reporter:  Tim Kleinschmidt |Owner:  nobody
 Type:  Bug  |   Status:  new
Component:  Database layer   |  Version:  1.11
  (models, ORM)  |
 Severity:  Release blocker  |   Resolution:
 Keywords:   | Triage Stage:  Accepted
Has patch:  0|  Needs documentation:  0
  Needs tests:  0|  Patch needs improvement:  0
Easy pickings:  0|UI/UX:  0
-+-
Changes (by felixxm):

 * Attachment "test-30769.diff" added.

 Regression test.

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/064.fa7d8fd4a5484aa4ef8d647539e72daa%40djangoproject.com.

Re: [Django] #30769: Access JSON key crashes when using annotated field from subquery.

[Django]

#30769: Access JSON key crashes when using annotated field from subquery.
-+-
 Reporter:  Tim Kleinschmidt |Owner:  nobody
 Type:  Bug  |   Status:  new
Component:  Database layer   |  Version:  1.11
  (models, ORM)  |
 Severity:  Release blocker  |   Resolution:
 Keywords:   | Triage Stage:  Accepted
Has patch:  0|  Needs documentation:  0
  Needs tests:  0|  Patch needs improvement:  0
Easy pickings:  0|UI/UX:  0
-+-
Changes (by felixxm):

 * Attachment "test-30769.diff" added.

 Regression test.

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/064.f12614abb3e3cadcf7c6defbb981%40djangoproject.com.

Re: [Django] #30769: Access JSON key crashes when using annotated field from subquery. (was: Access Json Key over annotated field in subquery)

[Django]

#30769: Access JSON key crashes when using annotated field from subquery.
-+-
 Reporter:  Tim Kleinschmidt |Owner:  nobody
 Type:  Bug  |   Status:  new
Component:  Database layer   |  Version:  1.11
  (models, ORM)  |
 Severity:  Release blocker  |   Resolution:
 Keywords:   | Triage Stage:  Accepted
Has patch:  0|  Needs documentation:  0
  Needs tests:  0|  Patch needs improvement:  0
Easy pickings:  0|UI/UX:  0
-+-
Changes (by felixxm):

 * severity:  Normal => Release blocker
 * cc: Simon Charette (added)
 * component:  Uncategorized => Database layer (models, ORM)
 * type:  Uncategorized => Bug
 * stage:  Unreviewed => Accepted


Comment:

 Thank for this report.

 Reproduced at 9a2a12d415e6d224797b0779c5af03deb8c45b0a.
 Regression in 7deeabc7c7526786df6894429ce89a9c4b614086.

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/064.d76fc8095e26a5bb268f240d4b98a6f9%40djangoproject.com.