[ https://issues.apache.org/jira/browse/HADOOP-8275?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Eli Collins updated HADOOP-8275:
--------------------------------
Summary: Range check DelegationKey length (was: harden serialization logic against
malformed or malicious input)
Hadoop Flags: Reviewed
Forgot to mention, jira for other places where we need to use readVInt range checking?
> Range check DelegationKey length
> ---------------------------------
>
> Key: HADOOP-8275
> URL: https://issues.apache.org/jira/browse/HADOOP-8275
> Project: Hadoop Common
> Issue Type: Bug
> Affects Versions: 0.23.0
> Reporter: Colin Patrick McCabe
> Assignee: Colin Patrick McCabe
> Priority: Minor
> Attachments: HADOOP-8275.001.patch, HADOOP-8275.002.patch, HADOOP-8275.003.patch
>
>
> Harden serialization logic against malformed or malicious input.
> Add range checking to readVInt, to detect overflows, underflows, and larger-than-expected
values.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
|