Uploading a file to a file variable endpoint when not authenticated causes the application to crash in mongoose_impl.c handle_uploads(). To duplicate: create and place a file variable with a write auth level of 1, log in to the dashboard as user, restart the mongoose application, then try to upload a file using the (invalidated) user session open in the browser.

cesanta / mongoose-wizard

1 stars 1 forks source link

Uploading a file to a file variable endpoint when not authenticated causes the application to crash in mongoose_impl.c handle_uploads(). To duplicate: create and place a file variable with a write auth level of 1, log in to the dashboard as user, restart the mongoose application, then try to upload a file using the (invalidated) user session open in the browser. #9

Closed cpq closed 1 month ago

robertc2000 commented 2 months ago

This seems to work for me. I did the steps as you mentioned and didn't manage to duplicate the issue...

dvosully commented 1 month ago

I (reporter) also cannot duplicate right now, though I did check and duplicate this morning... Right now the file uploads are completely unauthenticated instead which would be why it's not crashing. I'm not sure exactly when that changed, except that it's behaving differently for me than it was earlier today.

cpq commented 1 month ago

Good, so I am closing this for now.

@robertc2000 please add relevant tests to make sure we never regress!