[
https://issues.apache.org/jira/browse/IGNITE-21637?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17824290#comment-17824290
]
Ignite TC Bot commented on IGNITE-21637:
----------------------------------------
{panel:title=Branch: [pull/11261/head] Base: [master] : No blockers
found!|borderStyle=dashed|borderColor=#ccc|titleBGColor=#D6F7C1}{panel}
{panel:title=Branch: [pull/11261/head] Base: [master] : No new tests
found!|borderStyle=dashed|borderColor=#ccc|titleBGColor=#F7D6C1}{panel}
[TeamCity *--> Run :: All*
Results|https://ci2.ignite.apache.org/viewLog.html?buildId=7771981&buildTypeId=IgniteTests24Java8_RunAll]
> Possible integer overflow in page eviction trackers
> ---------------------------------------------------
>
> Key: IGNITE-21637
> URL: https://issues.apache.org/jira/browse/IGNITE-21637
> Project: Ignite
> Issue Type: Bug
> Reporter: Ilya Shishkov
> Assignee: Ilya Shishkov
> Priority: Critical
> Labels: ise
> Time Spent: 10m
> Remaining Estimate: 0h
>
> Ignite Node can fail with segmentation violation because of integer overflow
> when eviction policy is used and large amount pages is allocated.
> One of the problematic places: {{Random2LruPageEvictionTracker#touchPage}}
> [1]. In this place we can get incorrect offset value when {{trackingIdx}} is
> more than {{Integer.MAX_VALUE / 8}}:
> {{trackingArrPtr (long) + trackingIdx (int) * 8}}.
> #
> https://github.com/apache/ignite/blob/5ad698dab9835f6e6efb6a8b12da34515bd78349/modules/core/src/main/java/org/apache/ignite/internal/processors/cache/persistence/evict/Random2LruPageEvictionTracker.java#L95
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
