[ 
https://issues.apache.org/jira/browse/SLIDER-1129?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15296834#comment-15296834
 ] 

Steve Loughran commented on SLIDER-1129:
----------------------------------------

There's a little bit of fun here at test time. If you bump up the httpclient 
version in slider, but run against a pre-hadoop-2.8 version of Hadoop, then the 
AM fails
{code}
ent="text/html; charset=ISO-8859-1"/>
<title>Error 500 INTERNAL_SERVER_ERROR</title>
</head>
<body><h2>HTTP ERROR 500</h2>
<p>Problem accessing /proxy/application_1464028321205_0001/. Reason:
<pre>    INTERNAL_SERVER_ERROR</pre></p><h3>Caused 
by:</h3><pre>java.lang.NullPointerException
        at 
org.apache.http.client.utils.URLEncodedUtils.parse(URLEncodedUtils.java:235)
        at 
org.apache.hadoop.security.token.delegation.web.ServletUtils.getParameter(ServletUtils.java:48)
        at 
org.apache.hadoop.security.token.delegation.web.DelegationTokenAuthenticationHandler.managementOperation(DelegationTokenAuthenticationHandler.java:171)
        at 
org.apache.hadoop.security.authentication.server.AuthenticationFilter.doFilter(AuthenticationFilter.java:514)
        at 
org.apache.hadoop.yarn.server.security.http.RMAuthenticationFilter.doFilter(RMAuthenticationFilter.java:82)
        at 
org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1212)
        at 
org.apache.hadoop.http.HttpServer2$QuotingInputFilter.doFilter(HttpServer2.java:1243)
        at 
org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1212)
        at org.apache.hadoop.http.NoCacheFilter.doFilter(NoCacheFilter.java:45)
        at 
org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1212)
        at 
org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:399)
        at 
org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216)
        at 
org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)
        at 
org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)
        at org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:450)
        at 
org.mortbay.jetty.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:230)
        at 
org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)
        at org.mortbay.jetty.Server.handle(Server.java:326)
        at 
org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)
        at 
org.mortbay.jetty.HttpConnection$RequestHandler.headerComplete(HttpConnection.java:928)
        at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:549)
        at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:212)
        at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)
        at 
org.mortbay.io.nio.SelectChannelEndPoint.run(SelectChannelEndPoint.java:410)
        at 
org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)
</pre>
<hr /><i><small>Powered by Jetty://</small></i><br/>                            
                    
<br/>                                                
<br/>                                                
<br/>                                                
<br/>                                                
<br/>                                                
<br/>                                                
{code}

> update apache httpclient version to 4.5.2; httpcore to 4.4.4
> ------------------------------------------------------------
>
>                 Key: SLIDER-1129
>                 URL: https://issues.apache.org/jira/browse/SLIDER-1129
>             Project: Slider
>          Issue Type: Improvement
>          Components: build
>    Affects Versions: Slider 0.90.2
>            Reporter: Steve Loughran
>            Assignee: Steve Loughran
>   Original Estimate: 1h
>  Remaining Estimate: 1h
>
> We need to update the Http Client libraries, to address a couple of CVEs.
> apache httpclient => 4.5.2
> httpcore => 4.4.4
> We've done this for Hadoop in HADOOP-12767; this will be the same.
> # increment the versions
> # identify where minor version incompatibilities surface. (static code review)
> # test



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to