Skip to content

fix: [stable-9.0][OCISDEV-1140] bump reva to fix a crash in the permission check - #13436

Draft
2403905 wants to merge 2 commits into
stable-9.0from
fix/9.0/OCISDEV-1140
Draft

2403905 wants to merge 2 commits into
stable-9.0from
fix/9.0/OCISDEV-1140

Conversation

@2403905

@2403905 2403905 commented Nov 11, 2026

Copy link
Copy Markdown
Contributor

Description

The storage service could stop when it read the permissions of a user.
This PR bumps reva to adc8163b101c from owncloud/reva#804.
The reva change fixes the crash.

Changes

  • Check the result of a grant read before the code uses the grant.
  • Return an error for an invalid grant value.
  • Bump github.com/owncloud/reva/v2 in go.mod, go.sum and vendor/modules.txt.
  • Update the vendor folder.
  • Add the changelog entry changelog/unreleased/bugfix-decomposedfs-nil-grant-panic.md.

Notes

🤖 Generated with Claude Code

…ssion check

Bump reva to adc8163b101c from owncloud/reva#804. The reva change checks
the result of a grant read before it uses the grant. The change also
returns an error for an invalid grant value.

Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com>
@kw-security

kw-security commented Nov 11, 2026 •

Copy link
Copy Markdown

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues
✅ Licenses 0 0 0 0 0 issues
✅ Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants