[ https://issues.apache.org/jira/browse/CASSANDRA-15470?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17018689#comment-17018689 ]
Jordan West commented on CASSANDRA-15470: ----------------------------------------- * Thank you for adding the validation in the {{set*}} functions. The condition in {{setColumnIndexSize}} is using bitwise OR instead of logical OR. * The error message for {{conf.native_transport_max_frame_size_in_mb}} uses KiB as the unit. Also, is there a reason you picked 2 GiB as a frame size limit? On one hand it seems like a reasonable limit, on the other, within the scope of this ticket (preventing overflows when converting to bytes) I don’t know if we want to artificially limit it. > Potential Overflow in DatabaseDescriptor Functions That Convert Between KB/MB > & Bytes > ------------------------------------------------------------------------------------- > > Key: CASSANDRA-15470 > URL: https://issues.apache.org/jira/browse/CASSANDRA-15470 > Project: Cassandra > Issue Type: Bug > Components: Local/Config > Reporter: Jordan West > Assignee: Mallika Kulkarni > Priority: Normal > Labels: pull-request-available > Fix For: 4.0-rc > > Time Spent: 10m > Remaining Estimate: 0h > > {{DatabaseDescriptor}} has several functions that convert between user > supplied sizes in KB/MB and bytes. These are implemented without much > consistency and, while unlikely, several have the potential to overflow since > validation on the input is missing. Meanwhile, some widen the number to a > long correctly. Options include: widening in all places or simply doing > better validation on start up — currently only the lower bound of the valid > range is checked for many of these fields. > List of Affected {{DatabaseDescriptor}} Methods: > * {{getColumnIndexSize}} > * {{getColumnIndexCacheSize}} > * {{getBatchSizeWarnThreshold}} > * {{getNativeTransportFrameBlockSize}} > * {{getRepairSessionSpaceInMegabytes}} > * {{getNativeTransportMaxFrameSize}} -- This message was sent by Atlassian Jira (v8.3.4#803005) --------------------------------------------------------------------- To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org For additional commands, e-mail: commits-h...@cassandra.apache.org