cossacklabs / acra

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
https://www.cossacklabs.com/acra/
Apache License 2.0
1.35k stars 128 forks source link

Deserialization old containers on decryption fail #528

Closed Zhaars closed 2 years ago

Zhaars commented 2 years ago

Acra should return pure old container as is in case of decryption failure. Currently, on newly found old container(AcraStruct/AcraBlock) Acra serialize it to general container to get corresponded handler during decryption, but in case of failure return general container which is not correct.

Note: Acra should return deserialized container only in case of pure AcraStruct/AcraBlock, in all other scenarios general container should be returned.

Checklist