Page MenuHomePhabricator

Remove accidental sprintf injection in error reporting
ClosedPublic

Authored by alexmv on Mar 26 2018, 5:38 PM.
Tags
None
Referenced Files
F18095268: D19261.id46107.diff
Thu, Aug 7, 10:45 PM
F18095017: D19261.id.diff
Thu, Aug 7, 10:29 PM
F18090981: D19261.id.diff
Wed, Aug 6, 6:21 PM
F18088927: D19261.id46107.diff
Wed, Aug 6, 10:05 AM
F18082300: D19261.diff
Tue, Aug 5, 5:15 AM
F17944529: D19261.diff
Thu, Jul 31, 10:25 AM
Unknown Object (File)
May 31 2025, 12:14 PM
Unknown Object (File)
May 7 2025, 7:37 PM
Subscribers

Details

Summary

STDERR output with %s in it could cause:

ERROR 2: fprintf(): Too few arguments at [/usr/local/arcanist/src/workflow/ArcanistFeatureWorkflow.php:170]
Test Plan

Untested.

Diff Detail

Repository
rARC Arcanist
Branch
sprintf-injection
Lint
Lint Passed
Unit
Tests Passed
Build Status
Buildable 19927
Build 27013: Run Core Tests
Build 27012: arc lint + arc unit

Event Timeline

I'm getting permanent build failures on this diff, which look unrelated to the diff itself?

I'll take a look at the tests, definitely doesn't look related.

This revision is now accepted and ready to land.Mar 26 2018, 8:34 PM

The test failures are just T10093, i.e. arc didn't push the changes to the staging environment. Most common reason is that you're working off a local fork, not the One True Upstream Repository?

Yeah, that's prbably exactly it -- we push staging refs to a different namespace to not clutter the standard tag namespace, which is likely the problem.