Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Server accepts invalid/non-existent run name #4472

Open
geeksmith opened this issue Feb 26, 2025 · 0 comments
Open

Server accepts invalid/non-existent run name #4472

geeksmith opened this issue Feb 26, 2025 · 0 comments

Comments

@geeksmith
Copy link
Contributor

Describe the bug
Server accepts invalid/non-existent run name. It displays a list of reports that appears to be all reports from all runs.

CodeChecker version

[INFO 2025-02-26 18:51] - CodeChecker web version:
------------------------------------------------------------------------------
Kind                                | Version                                 
------------------------------------------------------------------------------
Base package version                | 6.24.5                                  
Package build date                  | 2025-01-21T15:37                        
Git commit ID (hash)                | 5914f3a98336823c3a0a1061d84832ed88822469
Git tag information                 | 6.24.5                                  
Server supported Thrift API version | 6.59                                    
Client Thrift API version           | 6.59                                    
------------------------------------------------------------------------------

To Reproduce
Go to a URL on the server with an invalid or non-existent run name, e.g. https://codechecker.example.com/myproduct/reports?run=bogus-run

Expected behaviour
I expect a page stating that the requested run does not exist.

Desktop (please complete the following information)

  • OS: Linux
  • Browser: Firefox
  • Version: 135.0.1

Additional context
Tested also on 6.23.1. I also wonder if other URL params lack sanity checks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant