Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Have a hard stop in Cron#next_time (and #previous_time) #13

Closed
jmettraux opened this issue Jan 8, 2019 · 6 comments
Closed

Have a hard stop in Cron#next_time (and #previous_time) #13

jmettraux opened this issue Jan 8, 2019 · 6 comments
Assignees

Comments

@jmettraux
Copy link
Member

As seen with @godfat in gh-11.

@jmettraux
Copy link
Member Author

Duplicate of #10, I should release ASAP.

@jmettraux
Copy link
Member Author

@godfat Would that suit you if I released fugit 1.1.7 immediately?

@godfat
Copy link

godfat commented Jan 9, 2019

@jmettraux Thank you very much for the quick reactions! I didn't have time to look into how this was implemented yet, but my main concern is that next_time can potentially never stop. This is way more harmful than accepting an invalid cron because it's very easily to shut down a service with that (i.e. a DoS attack). I really hope the implementation can be done in a way that it's impossible to get into this situation.

We're not using fugit yet, so please take your time, and there's no need to release a new version immediately for us, but I think that's indeed a very critical fix which should be available to other users soon.

On the other hand, I will be hesitant to make the switch before I am sure fugit will always stop in a timely manner. I'll verify the implementation later. (e.g. a loop has a hard limit to stop and raise an error)

Thanks again!

@jmettraux jmettraux changed the title Fugit.parse('* * 0 * *') should be rejected as invalid Have a hard stop in Cron#next_time (and #previous_time) Jan 9, 2019
@jmettraux
Copy link
Member Author

@godfat

We are in sync, I was thinking about such a hard stop as I was waiting for the bus. I will implement it.

Best regards and thanks again.

@godfat
Copy link

godfat commented Jan 9, 2019

Awesome, thank you!

@jmettraux
Copy link
Member Author

Included in the 1.1.7 release. Many thanks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants