[HADOOP-10830] Missing lock in JavaKeyStoreProvider.createCredentialEntry

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.4.1
• Fix Version/s: 2.6.0
• Component/s: security
• Hadoop Flags: Reviewed
• Assignee: Benoy Antony
• Reporter: Benoy Antony
• Created: 15/Jul/14 17:03
• Updated: 01/Dec/14 03:09
• Resolved: 23/Jul/14 18:43

Description

JavaKeyStoreProvider uses ReentrantReadWriteLock to provide thread safety.
The createCredentialEntry should hold writeLock before adding the entry.

Issue Links

• is related to: HADOOP-10607 Create an API to Separate Credentials/Password Storage from Applications