[IMPALA-2668] Error messages may reveal information about protected columns

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Duplicate
• Affects Version/s: Impala 2.3.0
• Fix Version/s: Impala 2.7.0
• Component/s: Catalog
• Labels: security
• Target Version: Impala 2.8.0
• Assignee: Dimitris Tsirogiannis
• Reporter: Tim Armstrong
• Created: 16/Nov/15 17:46
• Updated: 03/Nov/16 23:05
• Resolved: 03/Nov/16 23:05

Description

Some runtime error messages (e.g. failure to parse certain data values in a file) may include column names and data in a way that bypasses column-level security.

See testdata/workloads/functional-query/queries/DataErrorsTest/hdfs-scan-node-errors.test