Bug 1029437

Summary: paged queue exception exposes information about filesystem
Product: Red Hat Enterprise MRG Reporter: Gordon Sim <gsim>
Component: qpid-cppAssignee: Gordon Sim <gsim>
Status: CLOSED CURRENTRELEASE QA Contact: Eric Sammons <esammons>
Severity: unspecified Docs Contact:
Priority: medium    
Version: 3.0CC: esammons, iboverma, jross
Target Milestone: 3.0   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: qpid-cpp-0.22-26 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-01-21 12:56:15 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Gordon Sim 2013-11-12 11:48:15 UTC
Description of problem:

When attempting to send a message larger that then page size of a paged queue, an exception is raised as expected. However this exception includes the full path of the paging file which exposes too much information (that could be sensitive) to the user.

Version-Release number of selected component (if applicable):

Early access

How reproducible:

100%

Steps to Reproduce:
1. create paged queue with default settings
2. send 500k sized message

Actual results:

Exception contains full path of paging file

Expected results:

Exception just contains the information about the queue and the error that occurred.

Additional info:

Comment 1 Gordon Sim 2013-11-12 11:48:52 UTC
Fixed upstream: https://svn.apache.org/r1540137

Comment 2 Valiantsina Hubeika 2014-01-30 17:14:39 UTC
tested with python client & verified