-
Bug
-
Resolution: Fixed
-
Not Evaluated
-
None
-
production
-
None
-
9d2ada120 (v3.10-based)
QtStage and QtUnStage are subject to data corruption via a race condition if two events arrive in quick succession before the full operation can be completed. This is a critical vulnerability, as the result of two requests being processed by the singleton class at the same time is undefined behavior.
This can be solved either by removing the singleton decorator of the class or by moving class variables inside the relevant functions. The former is less predictable, as the reason for the class being a singleton is not well understood, and the latter solution is easy to implement.
For Gerrit Dashboard: QTQAINFRA-7325 | ||||||
---|---|---|---|---|---|---|
# | Subject | Branch | Project | Status | CR | V |
666316,2 | Fix possible data corruption in qtStage operations | v3.10-based | qtqa/gerrit-plugin-qt-workflow | Status: MERGED | +2 | 0 |