Page MenuHomePhabricator

Remove accidental sprintf injection in error reporting
ClosedPublic

Authored by alexmv on Mar 26 2018, 5:38 PM.
Tags
None
Referenced Files
F14082676: D19261.diff
Sat, Nov 23, 12:44 AM
Unknown Object (File)
Fri, Nov 22, 9:25 PM
Unknown Object (File)
Mon, Nov 18, 5:24 PM
Unknown Object (File)
Thu, Nov 14, 8:33 PM
Unknown Object (File)
Tue, Nov 12, 6:49 AM
Unknown Object (File)
Sun, Nov 10, 6:29 PM
Unknown Object (File)
Wed, Nov 6, 11:01 PM
Unknown Object (File)
Wed, Nov 6, 8:00 PM
Subscribers

Details

Summary

STDERR output with %s in it could cause:

ERROR 2: fprintf(): Too few arguments at [/usr/local/arcanist/src/workflow/ArcanistFeatureWorkflow.php:170]
Test Plan

Untested.

Diff Detail

Repository
rARC Arcanist
Branch
sprintf-injection
Lint
Lint Passed
Unit
Tests Passed
Build Status
Buildable 19927
Build 27013: Run Core Tests
Build 27012: arc lint + arc unit

Event Timeline

I'm getting permanent build failures on this diff, which look unrelated to the diff itself?

I'll take a look at the tests, definitely doesn't look related.

This revision is now accepted and ready to land.Mar 26 2018, 8:34 PM

The test failures are just T10093, i.e. arc didn't push the changes to the staging environment. Most common reason is that you're working off a local fork, not the One True Upstream Repository?

Yeah, that's prbably exactly it -- we push staging refs to a different namespace to not clutter the standard tag namespace, which is likely the problem.