[tarantool-patches] [PATCH] lua: fix assertion failure after improper box.schema.user:passwd() call

Vladimir Davydov vdavydov.dev at gmail.com
Fri Sep 14 18:17:52 MSK 2018


On Mon, Sep 10, 2018 at 04:36:43PM +0300, Serge Petrenko wrote:
> Calling box.schema.user:passwd() instead of box.schema.user.passwd()
> leads to lua passing box.schema.user table as first function argument.
> This case was unhandled in box.schema.user.passwd() function and lead to
> an assertion failure.
> Fix this by handling the aforementioned case and add a test.
> 
> Closes #3659
> ---
> https://github.com/tarantool/tarantool/issues/3659
> https://github.com/tarantool/tarantool/tree/sp/gh-3659-assert-in-user-passwd
> 
>  src/box/lua/schema.lua | 2 +-
>  test/box/misc.result   | 8 ++++++++
>  test/box/misc.test.lua | 6 ++++++
>  3 files changed, 15 insertions(+), 1 deletion(-)
> 
> diff --git a/src/box/lua/schema.lua b/src/box/lua/schema.lua
> index 540a2a5fd..6b0c1cbb7 100644
> --- a/src/box/lua/schema.lua
> +++ b/src/box/lua/schema.lua
> @@ -2025,7 +2025,7 @@ local function chpasswd(uid, new_password)
>  end
>  
>  box.schema.user.passwd = function(name, new_password)
> -    if name == nil then
> +    if name == nil or type(name) == 'table' then
>          box.error(box.error.PROC_LUA, "Usage: box.schema.user.passwd([user,] password)")
>      end
>      if new_password == nil then

This isn't a proper fix, because the following command still crashes:

  box.schema.user.passwd(123)

And this one crashes too:

  box.session.su('admin', function(x) return #x end, 123)

Making error messages user-friendly is good, but I think that #3659 is
about invalid usage of luaT_error in lbox_session_su...



More information about the Tarantool-patches mailing list