<!-- 
RSS generated by JIRA (8.20.10#820010-sha1:ace47f9899e9ee25d7157d59aa17ab06aee30d3d) at Wed Feb 07 20:09:50 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>OpenDaylight JIRA</title>
    <link>https://jira.opendaylight.org</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>8.20.10</version>
        <build-number>820010</build-number>
        <build-date>22-06-2022</build-date>
    </build-info>


<item>
            <title>[MDSAL-446] binding-dom-codec leaks mutable lists</title>
                <link>https://jira.opendaylight.org/browse/MDSAL-446</link>
                <project id="10137" key="MDSAL">mdsal</project>
                    <description>&lt;p&gt;Heap dump analysis done as part of &lt;a href=&quot;https://jira.opendaylight.org/browse/MDSAL-442&quot; title=&quot;Teach binding-dom-codec to keep its proxies in a separate ClassLoader&quot; class=&quot;issue-link&quot; data-issue-key=&quot;MDSAL-442&quot;&gt;&lt;del&gt;MDSAL-442&lt;/del&gt;&lt;/a&gt;/&lt;a href=&quot;https://jira.opendaylight.org/browse/MDSAL-445&quot; title=&quot;Reduce augmentation handling duplication in generated implementations&quot; class=&quot;issue-link&quot; data-issue-key=&quot;MDSAL-445&quot;&gt;&lt;del&gt;MDSAL-445&lt;/del&gt;&lt;/a&gt; shows that binding-dom-codec is using plain ArrayLists to represent lists.&lt;/p&gt;

&lt;p&gt;This is a violation of immutable contract imposed by the fact the data is actually backed by NormalizedNodes (and general MD-SAL architecture requirements, which stress the use of immutable objects), which can be exploited to make a NormalizedNode-backed DataObject report a different set of data than it actually represents.&lt;/p&gt;

&lt;p&gt;Audit the code and make sure all lists that we are giving out are immutable.&lt;/p&gt;</description>
                <environment></environment>
        <key id="31656">MDSAL-446</key>
            <summary>binding-dom-codec leaks mutable lists</summary>
                <type id="10104" iconUrl="https://jira.opendaylight.org/secure/viewavatar?size=xsmall&amp;avatarId=10303&amp;avatarType=issuetype">Bug</type>
                                            <priority id="2" iconUrl="https://jira.opendaylight.org/images/icons/priorities/critical.svg">High</priority>
                        <status id="5" iconUrl="https://jira.opendaylight.org/images/icons/statuses/resolved.png" description="A resolution has been taken, and it is awaiting verification by reporter. From here issues are either reopened, or are closed.">Resolved</status>
                    <statusCategory id="3" key="done" colorName="green"/>
                                    <resolution id="10000">Done</resolution>
                                        <assignee username="rovarga">Robert Varga</assignee>
                                    <reporter username="rovarga">Robert Varga</reporter>
                        <labels>
                    </labels>
                <created>Thu, 2 May 2019 19:29:42 +0000</created>
                <updated>Tue, 1 Oct 2019 12:46:35 +0000</updated>
                            <resolved>Tue, 20 Aug 2019 05:55:20 +0000</resolved>
                                                    <fixVersion>5.0.0</fixVersion>
                                    <component>Binding runtime</component>
                        <due></due>
                            <votes>0</votes>
                                    <watches>1</watches>
                                                                                                                <comments>
                            <comment id="66826" author="rovarga" created="Mon, 27 May 2019 15:22:47 +0000"  >&lt;p&gt;Re-targetting to 5.0.0, as I suspect this will break downstreams.&lt;/p&gt;</comment>
                            <comment id="66831" author="rovarga" created="Wed, 29 May 2019 12:10:03 +0000"  >&lt;p&gt;The knob to opt-out of using mutable lists should be delivered to 4.0.2.&lt;/p&gt;</comment>
                    </comments>
                    <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                            <customfield id="customfield_11400" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_10000" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0|i03nnb:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                </customfields>
    </item>
</channel>
</rss>