Skip to content

Fix subscription topic authorization bypass - #18418

Open
Caideyipi wants to merge 1 commit into
masterfrom
fix/subscription-rbac-transfer-slice-dos
Open

Fix subscription topic authorization bypass#18418
Caideyipi wants to merge 1 commit into
masterfrom
fix/subscription-rbac-transfer-slice-dos

Fix subscription topic authorization bypass

ed94e55
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / SonarCloud Code Analysis succeeded Aug 7, 2026 in 2m 59s

Quality Gate passed

Issues
20 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
2.4% Duplication on New Code

See analysis details on SonarQube Cloud

Annotations

Check warning on line 122 in iotdb-core/node-commons/src/main/java/org/apache/iotdb/commons/subscription/meta/topic/TopicMetaKeeper.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this useless assignment to local variable "topicName". 

See more on https://sonarcloud.io/project/issues?id=apache_iotdb&issues=AZ_aNEOWRt4gBeCJKM5n&open=AZ_aNEOWRt4gBeCJKM5n&pullRequest=18418

Check warning on line 694 in iotdb-core/datanode/src/main/java/org/apache/iotdb/db/storageengine/dataregion/memtable/AlignedWritableMemChunk.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Rename "dataTypes" which hides the field declared at line 69. 

See more on https://sonarcloud.io/project/issues?id=apache_iotdb&issues=AZ_aNEhvRt4gBeCJKM5w&open=AZ_aNEhvRt4gBeCJKM5w&pullRequest=18418

Check warning on line 488 in iotdb-core/datanode/src/main/java/org/apache/iotdb/db/pipe/resource/memory/PipeMemoryManager.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this unnecessary cast to "double". 

See more on https://sonarcloud.io/project/issues?id=apache_iotdb&issues=AZ_aNEquRt4gBeCJKM51&open=AZ_aNEquRt4gBeCJKM51&pullRequest=18418

Check warning on line 122 in iotdb-core/node-commons/src/main/java/org/apache/iotdb/commons/subscription/meta/topic/TopicMetaKeeper.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this unused "topicName" local variable. 

See more on https://sonarcloud.io/project/issues?id=apache_iotdb&issues=AZ_aNEOWRt4gBeCJKM5o&open=AZ_aNEOWRt4gBeCJKM5o&pullRequest=18418

Check failure on line 191 in iotdb-core/datanode/src/main/java/org/apache/iotdb/db/storageengine/load/active/ActiveLoadDirScanner.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this method to reduce its Cognitive Complexity from 18 to the 15 allowed. 

See more on https://sonarcloud.io/project/issues?id=apache_iotdb&issues=AZ_aNEh-Rt4gBeCJKM5y&open=AZ_aNEh-Rt4gBeCJKM5y&pullRequest=18418

Check failure on line 843 in iotdb-core/datanode/src/main/java/org/apache/iotdb/db/storageengine/dataregion/memtable/AlignedWritableMemChunk.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this method to reduce its Cognitive Complexity from 99 to the 15 allowed. 

See more on https://sonarcloud.io/project/issues?id=apache_iotdb&issues=AZ_aNEhvRt4gBeCJKM5x&open=AZ_aNEhvRt4gBeCJKM5x&pullRequest=18418

Check failure on line 687 in iotdb-core/datanode/src/main/java/org/apache/iotdb/db/storageengine/dataregion/memtable/AlignedWritableMemChunk.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this method to reduce its Cognitive Complexity from 97 to the 15 allowed. 

See more on https://sonarcloud.io/project/issues?id=apache_iotdb&issues=AZ_aNEhvRt4gBeCJKM5v&open=AZ_aNEhvRt4gBeCJKM5v&pullRequest=18418

Check warning on line 541 in iotdb-core/datanode/src/main/java/org/apache/iotdb/db/subscription/broker/consensus/ProgressWALIterator.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Extract this nested ternary operation into an independent statement. 

See more on https://sonarcloud.io/project/issues?id=apache_iotdb&issues=AZ_aNEuDRt4gBeCJKM53&open=AZ_aNEuDRt4gBeCJKM53&pullRequest=18418

Check warning on line 257 in iotdb-core/datanode/src/main/java/org/apache/iotdb/db/storageengine/load/active/ActiveLoadDirScanner.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Line is longer than 100 characters (found 134). 

See more on https://sonarcloud.io/project/issues?id=apache_iotdb&issues=AZ_aNEh-Rt4gBeCJKM5z&open=AZ_aNEh-Rt4gBeCJKM5z&pullRequest=18418

Check warning on line 162 in iotdb-core/datanode/src/main/java/org/apache/iotdb/db/subscription/broker/consensus/ProgressWALIterator.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Extract this nested ternary operation into an independent statement. 

See more on https://sonarcloud.io/project/issues?id=apache_iotdb&issues=AZ_aNEuDRt4gBeCJKM52&open=AZ_aNEuDRt4gBeCJKM52&pullRequest=18418

Check warning on line 178 in iotdb-core/node-commons/src/main/java/org/apache/iotdb/commons/subscription/meta/consumer/ConsumerGroupMeta.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Line is longer than 100 characters (found 155). 

See more on https://sonarcloud.io/project/issues?id=apache_iotdb&issues=AZ_aNEgfRt4gBeCJKM5q&open=AZ_aNEgfRt4gBeCJKM5q&pullRequest=18418

Check warning on line 768 in iotdb-core/datanode/src/main/java/org/apache/iotdb/db/storageengine/dataregion/memtable/AlignedWritableMemChunk.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Merge the previous cases into this one using comma-separated label. 

See more on https://sonarcloud.io/project/issues?id=apache_iotdb&issues=AZ_aNEhvRt4gBeCJKM5t&open=AZ_aNEhvRt4gBeCJKM5t&pullRequest=18418

Check warning on line 480 in iotdb-core/datanode/src/main/java/org/apache/iotdb/db/pipe/resource/memory/PipeMemoryManager.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this unnecessary cast to "double". 

See more on https://sonarcloud.io/project/issues?id=apache_iotdb&issues=AZ_aNEquRt4gBeCJKM50&open=AZ_aNEquRt4gBeCJKM50&pullRequest=18418

Check warning on line 1598 in iotdb-core/datanode/src/main/java/org/apache/iotdb/db/conf/IoTDBConfig.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Line is longer than 100 characters (found 123). 

See more on https://sonarcloud.io/project/issues?id=apache_iotdb&issues=AZ_aNE3NRt4gBeCJKM54&open=AZ_aNE3NRt4gBeCJKM54&pullRequest=18418

Check warning on line 1608 in iotdb-core/datanode/src/main/java/org/apache/iotdb/db/conf/IoTDBConfig.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Line is longer than 100 characters (found 136). 

See more on https://sonarcloud.io/project/issues?id=apache_iotdb&issues=AZ_aNE3NRt4gBeCJKM55&open=AZ_aNE3NRt4gBeCJKM55&pullRequest=18418

Check warning on line 707 in iotdb-core/datanode/src/main/java/org/apache/iotdb/db/storageengine/dataregion/memtable/AlignedWritableMemChunk.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Reduce the total number of break and continue statements in this loop to use at most one. 

See more on https://sonarcloud.io/project/issues?id=apache_iotdb&issues=AZ_aNEhvRt4gBeCJKM5r&open=AZ_aNEhvRt4gBeCJKM5r&pullRequest=18418

Check warning on line 758 in iotdb-core/datanode/src/main/java/org/apache/iotdb/db/storageengine/dataregion/memtable/AlignedWritableMemChunk.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Merge the previous cases into this one using comma-separated label. 

See more on https://sonarcloud.io/project/issues?id=apache_iotdb&issues=AZ_aNEhvRt4gBeCJKM5s&open=AZ_aNEhvRt4gBeCJKM5s&pullRequest=18418

Check warning on line 798 in iotdb-core/datanode/src/main/java/org/apache/iotdb/db/storageengine/dataregion/memtable/AlignedWritableMemChunk.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Merge the previous cases into this one using comma-separated label. 

See more on https://sonarcloud.io/project/issues?id=apache_iotdb&issues=AZ_aNEhvRt4gBeCJKM5u&open=AZ_aNEhvRt4gBeCJKM5u&pullRequest=18418

Check warning on line 63 in iotdb-core/node-commons/src/main/java/org/apache/iotdb/commons/subscription/meta/topic/TopicMetaKeeper.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this unused method parameter "topicName". 

See more on https://sonarcloud.io/project/issues?id=apache_iotdb&issues=AZ_aNEOWRt4gBeCJKM5m&open=AZ_aNEOWRt4gBeCJKM5m&pullRequest=18418

Check warning on line 152 in iotdb-core/node-commons/src/main/java/org/apache/iotdb/commons/subscription/meta/topic/TopicMetaKeeper.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

A single-line comment should start with exactly two slashes, no more. 

See more on https://sonarcloud.io/project/issues?id=apache_iotdb&issues=AZ_aNEOWRt4gBeCJKM5p&open=AZ_aNEOWRt4gBeCJKM5p&pullRequest=18418
View more details on SonarQubeCloud