Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

fix: Use sha256 to hash arguments of background jobs #47769

Merged

Conversation

artonge
Copy link
Contributor

@artonge artonge commented Sep 5, 2024

As we are using this hash as ID, it makes it more reliable than the current md5 hash we are using.

@artonge artonge added enhancement 3. to review Waiting for reviews php Pull requests that update Php code labels Sep 5, 2024
@artonge artonge added this to the Nextcloud 31 milestone Sep 5, 2024
@artonge artonge self-assigned this Sep 5, 2024
@artonge
Copy link
Contributor Author

artonge commented Sep 5, 2024

/backport to stable30

@artonge
Copy link
Contributor Author

artonge commented Sep 5, 2024

/backport to stable29

@artonge
Copy link
Contributor Author

artonge commented Sep 5, 2024

/backport to stable28

@artonge artonge force-pushed the artonge/fix/use_sha256_for_arguments_hash_forbg_jobs branch from b09b8d1 to 0460f00 Compare September 5, 2024 11:41
@artonge artonge force-pushed the artonge/fix/use_sha256_for_arguments_hash_forbg_jobs branch from 0460f00 to dc2d4d6 Compare September 5, 2024 12:46
This is to prevent collision as we are sometime hashing user input, yet using that hash to target the background job in the database.

Signed-off-by: Louis Chemineau <louis@chmn.me>
Signed-off-by: Louis Chemineau <louis@chmn.me>
@artonge artonge force-pushed the artonge/fix/use_sha256_for_arguments_hash_forbg_jobs branch from dc2d4d6 to dbf56b6 Compare September 5, 2024 13:37
@sorbaugh sorbaugh merged commit a933ba1 into master Sep 5, 2024
167 of 174 checks passed
@sorbaugh sorbaugh deleted the artonge/fix/use_sha256_for_arguments_hash_forbg_jobs branch September 5, 2024 15:53
kesselb added a commit that referenced this pull request Sep 12, 2024
Follow-up for #47769

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
3. to review Waiting for reviews enhancement php Pull requests that update Php code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants