hadoop-yarn-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Allen Wittenauer (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (YARN-6721) container-executor should have stack checking
Date Wed, 30 Aug 2017 18:29:01 GMT

     [ https://issues.apache.org/jira/browse/YARN-6721?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Allen Wittenauer updated YARN-6721:
-----------------------------------
    Attachment: YARN-6721.00.patch

-00:
* support for gcc, clang, and Sun
* expects HADOOP-14670 to be applied first


> container-executor should have stack checking
> ---------------------------------------------
>
>                 Key: YARN-6721
>                 URL: https://issues.apache.org/jira/browse/YARN-6721
>             Project: Hadoop YARN
>          Issue Type: Improvement
>          Components: nodemanager, security
>            Reporter: Allen Wittenauer
>            Assignee: Allen Wittenauer
>              Labels: security
>         Attachments: YARN-6721.00.patch
>
>
> As per https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt and given that container-executor
is setuid, it should be compiled with stack checking if the compiler supports such features.
 (-fstack-check on gcc, -fsanitize=safe-stack on clang, -xcheck=stkovf on "Oracle Solaris
Studio", others as we find them, ...)



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org


Mime
View raw message