MozillaSecurity / MozillaSecurity/FuzzManager

[CrashManager] Sanitize bug number input during assignment of a bucket

Open
#275 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

crashmanager
Dominant language
Python
Stars
208
Forks
48
Avg merge
23h 5m
Merged PRs (30d)
2

Description

If a bucket is assigned a bug number (which accidentally has a space prior), e.g. " 1285218" instead of "1285218", the bucket will fail to monitor the status of the bug because it links to "https://bugzilla.mozilla.org/show_bug.cgi?id=%201285218" instead of "https://bugzilla.mozilla.org/show_bug.cgi?id=1285218".

The correct way is to first sanitize the "Bug ID" input entry of all whitespace, in the "Link Signature" page.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start at the Link Signature page and inspect the Bug ID input and the code that builds the Bugzilla URL. Reproduce the issue with a leading space, then verify that whitespace is removed and the generated URL contains the plain bug number, such as 1285218.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
frontend
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.