nova-manage doesn't validate the key value supplied to update the quota
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Compute (nova) |
Fix Released
|
Medium
|
Vijaya Erukala | ||
Folsom |
Fix Released
|
Medium
|
Joe Gordon | ||
nova (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
Quantal |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
nova-manage doesn't validate the key value supplied while updating the quota's.Because of this unnecessary rows gets created in db and user will be under the impression that quota value got updated
For Ex: instances is the valid key value for the quota not instance.
$nova-manage project quota siri1 instance 240
metadata_items: 128
injected_
volumes: 10
gigabytes: 1000
ram: 51200
floating_ips: 10
security_
instances: 10
key_pairs: 100
injected_files: 5
cores: 20
injected_
security_groups: 10
mysql> select *from quotas;
+----+-
| id | created_at | updated_at | deleted_at | deleted | project_id | resource | hard_limit |
+----+-
| 1 | 2012-10-09 16:26:56 | 2012-10-09 16:30:56 | 2012-10-09 16:30:56 | 1 | siri1 | instances | 11 |
| 2 | 2012-10-09 16:40:44 | NULL | NULL | 0 | siri1 | vijaya1 | 240 |
| 3 | 2012-10-09 16:41:38 | NULL | NULL | 0 | siri1 | instance | 240 |
+----+-
3 rows in set (0.00 sec)
Related branches
- Openstack Ubuntu Testers: Pending requested
-
Diff: 121 lines (+100/-4)1 file modifieddebian/changelog (+100/-4)
CVE References
Changed in nova: | |
assignee: | nobody → Vijaya Erukala (vijaya-erukala) |
Changed in nova: | |
importance: | Undecided → Medium |
status: | New → Triaged |
tags: | added: folsom-backport-potential |
Changed in nova: | |
milestone: | none → grizzly-1 |
status: | Fix Committed → Fix Released |
tags: | removed: folsom-backport-potential |
Changed in nova (Ubuntu): | |
status: | New → Fix Released |
Changed in nova (Ubuntu Quantal): | |
status: | New → Confirmed |
Changed in nova: | |
milestone: | grizzly-1 → 2013.1 |
Fix proposed to branch: master /review. openstack. org/14217
Review: https:/