Global rename race condition with automatic account creation
Open, Needs TriagePublic
Actions

Assigned To

None

Authored By

	Legoktm
	May 19 2015, 5:41 PM

Description

[10:19:23] <RxyBotLT> [[Special:Log/gblrename]] rename  * Steinsplitter *  Steinsplitter globally renamed [[Special:CentralAuth/Misty~lvwiki]] to [[Special:CentralAuth/Mistymoonlight]]: per [[:m:Special:GlobalRenameQueue/request/14901|request]]

That rename was logged at 2015-05-19T17:19:22. However, the user was able to autocreate an account on wikidata at that same exact second:

2015-05-19 17:19:22 mw1208 wikidatawiki CentralAuth INFO: Attaching local user Misty~lvwiki@wikidatawiki by 'login' {"private":false}

The wikidatawiki account was *not* renamed and CentralAuthUser::queryAttached() is fataling due to that...but the localuser row *was* updated.

Event Timeline

Legoktm created this task.May 19 2015, 5:41 PM

Legoktm raised the priority of this task from to Needs Triage.

Legoktm updated the task description. (Show Details)

Legoktm added a project: GlobalRename.

Legoktm added subscribers: Legoktm, hoo.

Restricted Application added a project: MediaWiki-extensions-CentralAuth. · View Herald TranscriptMay 19 2015, 5:41 PM

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

Steinsplitter subscribed.May 19 2015, 5:42 PM

We probably read CentralAuthUser::listAttached() out of the out of date cache.

Framawiki moved this task from Backlog to Internal bugs on the MediaWiki-extensions-CentralAuth board.Jun 14 2017, 6:01 PM

Framawiki moved this task from Internal bugs to GlobalRename on the MediaWiki-extensions-CentralAuth board.

TerraCodes subscribed.Jul 17 2017, 1:20 AM

Global rename race condition with automatic account creationOpen, Needs TriagePublicActions

Description

Event Timeline

Global rename race condition with automatic account creation
Open, Needs TriagePublic
Actions