Uploaded image for project: 'Magnolia'
  1. Magnolia
  2. MAGNOLIA-8092

More than 50 aliases in a YAML file breaks parsing

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Neutral
    • 6.2.17
    • 6.2.8
    • core
    • Yes
    • Global Maintenance 3, Global Maintenance 4, DevX 1, DevX 2, DevX 3, DevX 4
    • 5

    Description

      Steps to reproduce

      1. Create a YAML file that features more than 50 aliases. Example.
      2. View the resulting object's definition.

      Expected results

      1. The file is parsed and the definition is visible.

      Actual results

      1. Due to a change in SnakeYAML 1.2.6 parsing is halted when the 51st alias is found so no definition is visible.

      Workaround

      1. It is possible to use includes instead of aliases. The above example can be fixed this way.

      Development notes

      1. The issue this solves is known as the Billion Laughs Attack. SnakeYAML was upgraded as part of MAGNOLIA-7912

      Checklists

        Acceptance criteria

        Attachments

          Issue Links

            Activity

              People

                mdivilek Milan Divilek
                chris.jennings Chris Jennings
                DeveloperX
                Votes:
                0 Vote for this issue
                Watchers:
                7 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved:

                  Checklists

                    Bug DoR
                    Task DoD

                    Time Tracking

                      Estimated:
                      Original Estimate - Not Specified
                      Not Specified
                      Remaining:
                      Remaining Estimate - Not Specified
                      Not Specified
                      Logged:
                      Time Spent - 0.25d
                      0.25d