[FLINK-21306] FlinkSecurityManager might avoid fatal system exits

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.13.0
• Fix Version/s: 1.13.0
• Component/s: Runtime / Task
• Labels: pull-request-available
• Assignee: Robert Metzger
• Reporter: Robert Metzger
• Created: 05/Feb/21 14:43
• Updated: 11/Oct/24 09:41
• Resolved: 30/Mar/21 06:23

Description

In FLINK-15156, we introduced a feature that allows users to log or completely disable calls to System.exit().
This feature is enabled for certain threads / code sections intended to execute user-code.
However, some user code calls might still lead to fatal errors, which we want to handle by killing the Flink process.
It is likely that this new change (which is disabled by default) can lead to a situation where Flink should exit immediately, but it doesn't (thus leaving the system in an inconsistent state)

Issue Links

• causes: FLINK-36511 FlinkSecurityManager#checkExit StackOverFlow if haltOnSystemExit is enabled
• is related to: FLINK-15156 Warn user if System.exit() is called in user code
• links to: GitHub Pull Request #15108