[HDFS-15917] Make HDFS native client more secure

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 3.4.0
• Component/s: libhdfs++
• Assignee: Gautham Banasandra
• Reporter: Gautham Banasandra
• Created: 24/Mar/21 07:38
• Updated: 02/Apr/21 18:01

Description

There's lots of legacy code in HDFS native client. With the recent C++17, CMake, Boost and other dependent library upgrades, we're noticing some deprecation warnings during compilation. We need to prioritize replacing the security related function calls as it's the most important functionality.

Issue Links

• is a parent of: HDFS-15910 Replace bzero with explicit_bzero for better safety
• is a parent of: HDFS-15918 Replace RAND_pseudo_bytes in sasl_digest_md5.cc
• is a parent of: HDFS-15928 Replace RAND_pseudo_bytes in rpc_engine.cc
• is a parent of: HDFS-15929 Replace RAND_pseudo_bytes in util.cc
• is a parent of: HDFS-15947 Replace deprecated protobuf APIs