[
https://issues.apache.org/jira/browse/MAPREDUCE-5208?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13651499#comment-13651499
]
Hadoop QA commented on MAPREDUCE-5208:
--------------------------------------
{color:green}+1 overall{color}. Here are the results of testing the latest
attachment
http://issues.apache.org/jira/secure/attachment/12582214/MAPREDUCE-5208-20130507.patch
against trunk revision .
{color:green}+1 @author{color}. The patch does not contain any @author
tags.
{color:green}+1 tests included{color}. The patch appears to include 2 new
or modified test files.
{color:green}+1 javac{color}. The applied patch does not increase the
total number of javac compiler warnings.
{color:green}+1 javadoc{color}. The javadoc tool did not generate any
warning messages.
{color:green}+1 eclipse:eclipse{color}. The patch built with
eclipse:eclipse.
{color:green}+1 findbugs{color}. The patch does not introduce any new
Findbugs (version 1.3.9) warnings.
{color:green}+1 release audit{color}. The applied patch does not increase
the total number of release audit warnings.
{color:green}+1 core tests{color}. The patch passed unit tests in
hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-core
hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-shuffle.
{color:green}+1 contrib tests{color}. The patch passed contrib unit tests.
Test results:
https://builds.apache.org/job/PreCommit-MAPREDUCE-Build/3584//testReport/
Console output:
https://builds.apache.org/job/PreCommit-MAPREDUCE-Build/3584//console
This message is automatically generated.
> SpillRecord and ShuffleHandler should use SecureIOUtils for reading index
> file and map output
> ---------------------------------------------------------------------------------------------
>
> Key: MAPREDUCE-5208
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-5208
> Project: Hadoop Map/Reduce
> Issue Type: Bug
> Reporter: Omkar Vinit Joshi
> Assignee: Omkar Vinit Joshi
> Attachments: MAPREDUCE-5208-20130506.patch,
> MAPREDUCE-5208-20130507.patch
>
>
> ShuffleHandler (map output file) and SpillRecord (index file) are reading
> file using unsecured input stream. There exists a possibility for symlink
> attack. related to YARN-578 . Creating this issue to track map reduce changes.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
