-
Notifications
You must be signed in to change notification settings - Fork 243
New issue
Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? # to your account
Processing invalid PT after cutting off unknown_parameter or unknown_RPC #1921
Comments
Priority was set to High. Updating policy with invalid PTU (which contains unknown RPC or parameter) may affect application permissions calculating process. |
Issue is reproduced on develop branch (0b19cf4). |
Issue is related to #1885 |
Fix is available #1972 But fix is partial. It includes only cutting off <unknown_parameter> And It does not cut's of <unknown_RPC>. Missing functionality of cutting <unknown_RPC> is nice to have but there are no use cases when present <unknown_RPC> could break the flow. @robinmk, @mrapitis please considering this points, should cutting <unknown_RPC> functionality be implemented or not? |
@LuxoftAKutsan , I have the same understanding as well - that unknown RPCs will be rejected/ignored early on and hence it would not break policies. If there is any change in this understanding please inform us as we will need to address at the earliest. |
@LuxoftAKutsan I agree with @robinmk comment as well -- the RPC should send a generic response back to the mobile if it is of an unknown type (as it does today) which should not impact policies. |
@GetmanetsIrina are there any remaining tasks required here? It looks like we still have three items unchecked in the expected delivery section. Can you please check them if this was an oversight? The pr associated should be #1972 |
@LuxoftAKutsan how to #2006 and #1972 differ? it looks like #1972 was already reviewed? |
Occurrence: Always
Steps to reproduce
Expected result
and after cutting off <unknown_parameter> or <unknown_RPC> UpdatedPT performs validation of received PT
Actual result
SDL performs PT validation without cutting off <unknown_parameter> or <unknown_RPC>
Test script
1921_Invalid_PT_after_cutting_unknow_values.lua
Environment
Attachments
Expected delivery
The text was updated successfully, but these errors were encountered: