Uploaded image for project: 'Hadoop Map/Reduce'
  1. Hadoop Map/Reduce
  2. MAPREDUCE-5208

SpillRecord and ShuffleHandler should use SecureIOUtils for reading index file and map output

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.1.0-beta
    • Component/s: None
    • Labels:
      None
    • Hadoop Flags:
      Reviewed

      Description

      ShuffleHandler (map output file) and SpillRecord (index file) are reading file using unsecured input stream. There exists a possibility for symlink attack. related to YARN-578 . Creating this issue to track map reduce changes.

        Attachments

        1. MAPREDUCE-5208.20130513.branch2.update.1.patch
          2 kB
          Omkar Vinit Joshi
        2. MAPREDUCE-5208.20130513.branch2.update.patch
          14 kB
          Omkar Vinit Joshi
        3. MAPREDUCE-5208.20130510.patch
          14 kB
          Omkar Vinit Joshi
        4. MAPREDUCE-5208-20130507.patch
          10 kB
          Omkar Vinit Joshi
        5. MAPREDUCE-5208-20130506.patch
          3 kB
          Omkar Vinit Joshi

          Issue Links

            Activity

              People

              • Assignee:
                ojoshi Omkar Vinit Joshi
                Reporter:
                ojoshi Omkar Vinit Joshi
              • Votes:
                0 Vote for this issue
                Watchers:
                9 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: