Code Review / aaa.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: c35d214) | patch
Use prepareStatement() in RoleStore.deleteRole() 46/103246/1
authorRobert Varga <robert.varga@pantheon.tech>
Wed, 16 Nov 2022 17:20:59 +0000 (18:20 +0100)
committerRobert Varga <robert.varga@pantheon.tech>
Wed, 16 Nov 2022 17:42:54 +0000 (18:42 +0100)
commit83251ac55b8e0d614e7306ad4c1bd0982f657cb3
treef929a54fda529ae75a8586d4f12ad4c07f0367e5tree | snapshot
parentc35d21434b48fc243f6bce28aff30650ace5a731commit | diff
Use prepareStatement() in RoleStore.deleteRole()

The conversion to prepared statements has not dealt with the delete
function, leaving the ability to wipe the entire RoleStore with SQL
injection. Fix this by using a proper prepared statement.

JIRA: AAA-239
Change-Id: If46a900951b4f1769239bd5f38516b299284f88b
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
(cherry picked from commit e0ead2109e45d770b48bb3b848d9e75185c98c4c)
aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/RoleStore.java diff | blob | history
Authentication, Authorization, Accounting