On Fri, Mar 22, 2013 at 05:45:48AM +0000, Likitha Shetty wrote:
> Already checked in master.
> 
> CLOUDSTACK-1625. NPE with updateResourceCount when && is passed thru API.
> If any API contains '&' i.e. no key value pair or '&<paramter-name>' i.e. a 
> parameter without a value, then we get an NPE as 
> owasp.esapi.StringUtilities.stripControls deosn't handle NPE.
> 
> Branch: refs/heads/master
> Commit: da89946ca93a872d0a4bf907d4545c392b2055f1
> Parents: c235d02
> Author: Likitha Shetty <likitha.she...@citrix.com>
> Committed: Tue Mar 12 12:00:46 2013 +0530
> 
> ----------------------------------------------------------------------
>  server/src/com/cloud/api/ApiServer.java |   10 ++++++----
>  1 files changed, 6 insertions(+), 4 deletions(-)
> ----------------------------------------------------------------------
> 
> Thank you,
> Likitha
> 
>

Ack - pushed to 4.1:

# git cherry-pick da89946ca93a872d0a4bf907d4545c392b2055f1
[4.1 7cf6aee] CLOUDSTACK-1625. NPE with updateResourceCount when && is
passed thru API. If any API contains '&' i.e. no key value pair or
'&<paramter-name>' i.e. a parameter without a value, then we get an NPE
as owasp.esapi.StringUtilities.stripControls deosn't handle NPE.

 Author: Likitha Shetty <likitha.she...@citrix.com>
  1 file changed, 6 insertions(+), 4 deletions(-)

Reply via email to