MC-36035: Prevent input based resource allocation

hwyu@adobe.com · hwyu@adobe.com · commit dd73e99b340d · 2021-04-30T16:14:37.000-05:00
diff --git a/lib/internal/Magento/Framework/Webapi/ServiceInputProcessor.php b/lib/internal/Magento/Framework/Webapi/ServiceInputProcessor.php
@@ -11,6 +11,7 @@
 
 use Magento\Framework\Api\AttributeValue;
 use Magento\Framework\Api\AttributeValueFactory;
+use Magento\Framework\Api\SearchCriteriaInterface;
 use Magento\Framework\Api\SimpleDataObjectConverter;
 use Magento\Framework\App\ObjectManager;
 use Magento\Framework\Exception\InputException;
@@ -299,6 +300,13 @@ protected function _createFromArray($className, $data)
                 $object->{$setterName}($setterValue);
             }
         }
+
+        if ($object instanceof SearchCriteriaInterface
+            && $object->getPageSize() === null
+        ) {
+            $object->setPageSize(20);
+        }
+
         return $object;
     }
 

Original file line number	Diff line number	Diff line change
`@@ -11,6 +11,7 @@`
`11`	`11`
`12`	`12`	`use Magento\Framework\Api\AttributeValue;`
`13`	`13`	`use Magento\Framework\Api\AttributeValueFactory;`
	`14`	`+use Magento\Framework\Api\SearchCriteriaInterface;`
`14`	`15`	`use Magento\Framework\Api\SimpleDataObjectConverter;`
`15`	`16`	`use Magento\Framework\App\ObjectManager;`
`16`	`17`	`use Magento\Framework\Exception\InputException;`
`@@ -299,6 +300,13 @@ protected function _createFromArray($className, $data)`
`299`	`300`	`$object->{$setterName}($setterValue);`
`300`	`301`	`}`
`301`	`302`	`}`
	`303`	`+`
	`304`	`+ if ($object instanceof SearchCriteriaInterface`
	`305`	`+ && $object->getPageSize() === null`
	`306`	`+ ) {`
	`307`	`+ $object->setPageSize(20);`
	`308`	`+ }`
	`309`	`+`
`302`	`310`	`return $object;`
`303`	`311`	`}`
`304`	`312`