Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 5 Next »

CPS-1169 - Getting issue details... STATUS

Overview:

Within the CPS, the current version of the OpenDaylight Yang-Tools being used is 6.0.1. There was a vulnerability detected within this library and it was raised as a bug in the following Jira ticket:

CPS-1150 - Getting issue details... STATUS

Due to the latest versions of this library not being compatible with CPS, this bug has been closed with exemption being raised, but we decided to investigate into upgrading open daylight regardless, to prevent future vulnerabilities like this from happening.

Incompatible Objects:

Incompatible objects currently being used within CPS with latest open daylight version

OpenDaylight 6.0.1

  • NormalizedNode<?,?> - Takes two wild card arguments.
  • ValueNode<?,?> - Takes two wild card arguments
  • YangTextSchemaSource - Abstract class which contains two methods implemented within CPS.
  • DataContainerNode<?> - Takes one wild card argument
    • Currently uses getValue() to retrieve child data node, no longer available in upgrade.
  • DataContainerChild<?,?> - Takes two wild card arguments.
  • LeafSetNode
    • Currently uses getNodeType().getLocalName() to get the leaf list name, which has moved in latest version.
    • Currently uses getValue() to retrieve list list values, no longer available in upgrade.
  • MapNode
    • Currently uses getValue() to get a collection of MapEntryNodes.
  • YangSyntaxErrorException - Has moved location
  • JsonParserStream
    • Overridden method which can take two or three arguments, JsonParserStream.create(NormailzedStreamWriter, codecFactory, SchemaNode)

OpenDaylight 8.0.6

  • NormalizedNode - No longer takes any arguments.
  • ValueNode<?,?> - No longer takes any arguments.
  • YangTextSchemaSource - Abstract class which contains three methods, new getSymbolicName method of type Optional String must be implemented. Can return empty.
  • DataContainerNode - Takes one wild card argument.
    • Alternate to getVlaue could be body()
  • DataContainerChild<?,?> - No longer takes any arguments.
  • LeafSetNode
    • getNodeType().getLocalName() is found under getIdentifier().getNodeType().getLocalName
    • Alternate to getVlaue could be body()
  • MapNode
    • Alternative to above could be mapNode.asMap().values()
  • YangSyntaxErrorException - Has moved to new location
  • JsonParserStream - Takes Different Arguments
    • Overridden method which can take two or three arguments, JsonParserStream.create(NormailzedStreamWriter, codecFactory, EffectiveStatementInference)


  • No labels