Uploaded image for project: 'Hadoop Map/Reduce'
  1. Hadoop Map/Reduce
  2. MAPREDUCE-5208

SpillRecord and ShuffleHandler should use SecureIOUtils for reading index file and map output

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 2.1.0-beta
    • None
    • None
    • Reviewed

    Description

      ShuffleHandler (map output file) and SpillRecord (index file) are reading file using unsecured input stream. There exists a possibility for symlink attack. related to YARN-578 . Creating this issue to track map reduce changes.

      Attachments

        1. MAPREDUCE-5208.20130513.branch2.update.1.patch
          2 kB
          Omkar Vinit Joshi
        2. MAPREDUCE-5208.20130513.branch2.update.patch
          14 kB
          Omkar Vinit Joshi
        3. MAPREDUCE-5208.20130510.patch
          14 kB
          Omkar Vinit Joshi
        4. MAPREDUCE-5208-20130507.patch
          10 kB
          Omkar Vinit Joshi
        5. MAPREDUCE-5208-20130506.patch
          3 kB
          Omkar Vinit Joshi

        Issue Links

          is blocked by

          Improvement - An improvement or enhancement to an existing feature or task. HADOOP-9511 Adding support for additional input streams (FSDataInputStream and RandomAccessFile) in SecureIOUtils.

          • Major - Major loss of function.
          • Closed
          is related to

          Sub-task - The sub-task of the issue YARN-578 NodeManager should use SecureIOUtils for serving and aggregating logs

          • Major - Major loss of function.
          • Closed

          Activity

            People

              ojoshi Omkar Vinit Joshi
              ojoshi Omkar Vinit Joshi
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: