-
Bug
-
Resolution: Fixed
-
Minor
-
None
hudson.model.Fingerprint.RangeSet.fromString(...) accepts a malformed form of string which doesn't represent any range like:
- "1--5" or "1------5"
- "1,,5" or "1,,,,,,,5"
- "1-5-"
- ",-,"
- "1-"
- ",1,2"
- "5-1" etc.
Proposed fix:
We should be very rigid and careful of input validation because this function is directly utilized from e.g. AbstractBuildRangeCommand class where user input string is passed directly without any validation.
PR sent.