[YARN-7455] quote_and_append_arg can overflow buffer

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.9.0, 3.0.0
• Fix Version/s: 3.1.0, 2.10.0, 2.9.1, 3.0.1
• Component/s: nodemanager
• Target Version/s: 2.9.1, 3.0.1
• Hadoop Flags: Reviewed
• Assignee: Jim Brennan
• Reporter: Jason Darrell Lowe
• Created: 07/Nov/17 17:00
• Updated: 01/Dec/17 22:19
• Resolved: 01/Dec/17 21:56

Description

While reviewing YARN-7197 I noticed that add_mounts in docker_util.c has a potential buffer overflow since tmp_buffer is only 1024 bytes which may not be sufficient to hold the specified mount path.