[ https://issues.apache.org/jira/browse/CASSANDRA-18505?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17720604#comment-17720604 ]
Jon Meredith edited comment on CASSANDRA-18505 at 5/8/23 4:55 PM: ------------------------------------------------------------------ 4.0 [PR|https://github.com/apache/cassandra/pull/2312] - others very similar was (Author: jonmeredith): 4.0 [PR|https://github.com/apache/cassandra/pull/2312] > NPE when deserializing malformed collections from client > -------------------------------------------------------- > > Key: CASSANDRA-18505 > URL: https://issues.apache.org/jira/browse/CASSANDRA-18505 > Project: Cassandra > Issue Type: Bug > Components: Messaging/Client > Reporter: Jon Meredith > Assignee: Jon Meredith > Priority: Normal > Fix For: 4.0.x, 4.1.x, 5.0 > > > When deserializing collections sent from the client, if an element in the > collection is incorrectly serialized, Collections.getValue can return null if > the length of the element is negative. Currently this isn't detected and > serialization continues, calling validate and throwing an NPE in serializers > that don't handle null value buffers. > Detect the malformed input and throw a better MarshalException so it will be > converted to an InvalidRequestException for the client. -- This message was sent by Atlassian Jira (v8.20.10#820010) --------------------------------------------------------------------- To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org For additional commands, e-mail: commits-h...@cassandra.apache.org