[HBASE-26087] JVM crash when displaying RPC params by MonitoredRPCHandler

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.0.0-alpha-1, 2.0.0
• Fix Version/s: 2.5.0, 3.0.0-alpha-2, 2.4.6, 2.3.7
• Component/s: UI
• Assignee: Xiaolin Ha
• Reporter: Xiaolin Ha
• Created: 14/Jul/21 12:47
• Updated: 19/Aug/21 13:46
• Resolved: 18/Aug/21 07:00

Description

It is the same problem as HBASE-25981.
The reason here is MonitoredRPCHandlerImpl uses the shallow copy of call param to displaying RPC info, but the param contains offheap request data. Thought when calling toMap() there is state checking for the monitored RPC, only RUNNING RPCs can read and display params, the state is ENUM type and like a constant in clone().
So there exists circumstances that the state in the clone MonitoredRPCHandler is RUNNING, but the param still refers to the cloned MonitoredRPCHandler, whose state changed to be not RUNNING and param referred offheap ByteBuffer is released.

Issue Links

• is part of: HBASE-25981 JVM crash when displaying regionserver UI
• links to: GitHub Pull Request #3489