search

jbrzusto / motusServer

R package to operate a server that processes data for https://motus.org
GNU General Public License v2.0
1 stars 0 forks source link

status API: list_jobs with select={stump="0"} returns entire job DB #381

Closed jbrzusto closed 6 years ago

jbrzusto commented 6 years ago

typically causing a browser to fail on a huge memory allocation

e.g. this URL does it:

https://sgdata.motus.org/status?jobID=0

jbrzusto commented 6 years ago

Happens with any jobID that isn't valid. This is due to my having allowed for the ID of a non-top-level job to be supplied. list_jobs() looks up the stump, but fails to deal correctly with an invalid jobID, which in turn leads to a collapse of the id-filtering portion of the DB query, and that means we get back all jobs.