[IMPALA-9232] Potential overflow in SerializeThriftMsg

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: Impala 4.0.0
• Component/s: Backend
• Epic Color: ghx-label-7
• Assignee: Qifan Chen
• Reporter: Tim Armstrong
• Created: 10/Dec/19 23:30
• Updated: 15/Oct/20 17:14
• Resolved: 15/Oct/20 17:14

Description

https://github.com/apache/impala/blob/master/be/src/rpc/jni-thrift-util.h#L30 a uint32_t is passed into NewByteArray and SetByteArrayRegion which both take int32_t arguments.

I think the RETURN_ERROR_IF_EXC checks would likely catch this, but would be good to fix.