[sldev] [SVC][VWR] Broken inventory and ways to break it

[Robin Cornelius]

Soft wrote:
> Oof - the folder IDs aren't generated server-side? If it's possible to
> do this on the viewer end, that's a bit silly.
> 

Hi Soft,

Well the server needs to just validate the requested target ID's to
check that its not something stupid such as itsself, the inventory root,
UUID.Zero or even something that just does not exist in the inventory,
but i'm not sure how easy the last part is knowing nothing about the
server architecture.

> 
>> This causes failure in DragDrop cargo's where cargo==null, and triggers
>> VWR-2003 when a drag drop (eg send inv item to profile) occurs.
> 
> Thanks, I saw you reopened that so we'll go ahead and dad protection there.
> 

Protection is good, but it could lead to unexplained "can't send items",
something is seriously wrong if the cargo == NULL so may be an alert is
appropriate.

> 
>> I probably should file some specific SVR issues for each of these
>> conditions and generate repo code (on the beta grid i guess for saftey)
>> but if any Linden wants a specific account that is in state #3 now i can
>> provide one and a support ticket ID that a user has filed.
> 
> Please do create the JIRAs at least. Repro code would be awesome too.
> If the affected account hasn't been on aditi, getting them to log on
> there once would be helpful as well - then we can hijack and
> investigate the state of the inventory without disrupting agni
> activity.
> 

Ok i've arranged for the user to login to beta and I will start to file
individual JIRAs (SVC) as appropriate but with Christmas in the way and
all it will take a little while.

Is this also worth flagging to the inventory loss team, we have a
situation where there is something in inventory i can only see via
packet dumps, neither the viewer or libomv's InventoryManager are by
default displaying this item so the item/folder appears to be lost.

Regards and an appropriate Festive greeting to all.

Robin


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 260 bytes
Desc: OpenPGP digital signature
Url : http://lists.secondlife.com/pipermail/sldev/attachments/20081224/41ef3fb0/signature.pgp