[
https://issues.apache.org/jira/browse/HADOOP-19936?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18095294#comment-18095294
]
ASF GitHub Bot commented on HADOOP-19936:
-----------------------------------------
steveloughran commented on PR #8594:
URL: https://github.com/apache/hadoop/pull/8594#issuecomment-4935712164
updated. Cut the public TFileMeta/1 ctors as the class is actually package
private, nothing was using it.
If anyone feels that is overkill and suspects that there was some reflection
based access, I could revert.
> TFile parsing is too brittle
> ----------------------------
>
> Key: HADOOP-19936
> URL: https://issues.apache.org/jira/browse/HADOOP-19936
> Project: Hadoop Common
> Issue Type: Improvement
> Components: io
> Affects Versions: 3.5.0, 3.4.3
> Reporter: Steve Loughran
> Assignee: Steve Loughran
> Priority: Minor
> Labels: pull-request-available
>
> TFile parser doesn't validate its inputs before allocating memory or
> attempting to instantiate a class. This is old code, but still used in places.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
