-
Bug
-
Resolution: Fixed
-
Minor
-
None
hudson.model.Fingerprint.RangeSet.fromString(...) accepts a malformed form of string which doesn't represent any range like:
- "1--5" or "1------5"
- "1,,5" or "1,,,,,,,5"
- "1-5-"
- ",-,"
- "1-"
- ",1,2"
- "5-1" etc.
Proposed fix:
We should be very rigid and careful of input validation because this function is directly utilized from e.g. AbstractBuildRangeCommand class where user input string is passed directly without any validation.