zap-extensions
zap-extensions copied to clipboard
zaproxy
openapi: fix import of big files
Overview
Fix import openapi definitions from files. It fails with big files.
Related Issues
Specify any related issues or pull requests by linking to them.
https://github.com/zaproxy/zaproxy/issues/8193
Checklist
- [ ] Update help
- [ ] Update changelog
- [x] Run
./gradlew spotlessApplyfor code formatting - [ ] Write tests
- [ ] Check code coverage
- [x] Sign-off commits
- [ ] Squash commits
- [ ] Use a descriptive title
For more details, please refer to the developer rules and guidelines.
CLA Assistant Lite bot All contributors have signed the CLA ✍️ ✅
![github-actions[bot] avatar](https://avatars.githubusercontent.com/in/15368?v=4 "Published by a pub.dev verified publisher"){kind=small}
IMO this is not the proper fix, we should change the parser limits instead.
Agreed, however I understand the limit that is being reached here is the String's Maximum length(Integer.MAX_INT or 2147483647) as seen on the exception
com.fasterxml.jackson.databind.JsonMappingException: TextBuffer overrun: size reached (2147483648)
...
Caused by: java.lang.IllegalStateException: TextBuffer overrun: size reached (2147483648)
...
Not sure how to address that. Besides the method where the exception is being thrown, Json.pretty() belongs to external library swagger-core so it does not look like we can change that.
Another alternative which I was thinking was to catch for the IllegalStateException and only on that instance to get the string directly from the file, which seems a bit more proper.
Thoughts? Any other ideas on how to fix it?
It looks suspicious that's actually hitting the max of the string, what's the size of the original definition? Did you try write the expanded definition to a file to see its size (and contents for that matter)?
I'm aware that's a class/method from the library, but that's "one" line of code.
Agreed that looks better still I'd skip the pretty print instead of reading from the file (as that would break the multi file).
@megalucio are you able to answer the latest questions and keep going with this?
Giving another go to this one, @thc202 what do you mean by the original and expanded definitions? Not sure, I'm following here. Thanks
In SwaggerConverter calls to resolveFully will replace the references with actual values which will make the definition bigger, i was suggesting saving that one and verify the contents and the size.
Would still be interesting to know the size of the original.
With Json.mapper().writeValueAsString(…) (or Yaml depending what format you have), you can also write to file with one of the other methods of that class.
It looks suspicious that's actually hitting the max of the string, what's the size of the original definition? Did you try write the expanded definition to a file to see its size (and contents for that matter)?
I'm aware that's a class/method from the library, but that's "one" line of code.
Agreed that looks better still I'd skip the pretty print instead of reading from the file (as that would break the multi file).
Honestly I'm not sure what you mean by the original definition, this is what is being provided. Still unable to process big openapi definitions.
With
Json.mapper().writeValueAsString(…)(orYamldepending what format you have), you can also write to file with one of the other methods of that class.
Yeah, that is where the exception is being thrown, this is what happens inside pretty. But the good thing about using it is that in this instance I can catch the exception and only read directly from file when that happens which respects more the previous implementation, I figure this is more backwards compatible. Only doubt I have is if still use Json.pretty or stick with Json.mapper().writeValueAsString(…)`. I will post a new commit now with this idea see what you think.
Did you try write to file?
If I am understanding you correctly, I get the same exception when Json.mapper().writeValueAsString so basically cant write to file.
I mean one of the other methods not that one, e.g. writeValue(File, Object).
- This needs a
spotlessApply. - Can you add an entry to the changelog? Something like:
### Changed
- Workaround issue loading fully resolved definitions that are too large by trying to use the original definition only (Issue 8193).