[kafka] branch trunk updated: KAFAK-14660: Fix divide-by-zero vulnerability (#13175)

[mjsax]

This is an automated email from the ASF dual-hosted git repository.

mjsax pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/kafka.git


The following commit(s) were added to refs/heads/trunk by this push:
     new dc011992712 KAFAK-14660: Fix divide-by-zero vulnerability (#13175)
dc011992712 is described below

commit dc011992712805e22009bbc3eb81be81228ed0b9
Author: Matthias J. Sax <matth...@confluent.io>
AuthorDate: Mon Jan 30 23:39:41 2023 -0800

    KAFAK-14660: Fix divide-by-zero vulnerability (#13175)
    
    This PR adds a safe-guard for divide-by-zero. While `totalCapacity` can 
never be zero, an explicit error message is desirable.
    
    Reviewers: Bill Bejeck <b...@confluent.io>, Guozhang Wang 
<guozh...@confluent.io>
---
 .../streams/processor/internals/assignment/StickyTaskAssignor.java    | 4 ++++
 1 file changed, 4 insertions(+)

diff --git 
a/streams/src/main/java/org/apache/kafka/streams/processor/internals/assignment/StickyTaskAssignor.java
 
b/streams/src/main/java/org/apache/kafka/streams/processor/internals/assignment/StickyTaskAssignor.java
index d9f7efa2a16..18abbc14c4a 100644
--- 
a/streams/src/main/java/org/apache/kafka/streams/processor/internals/assignment/StickyTaskAssignor.java
+++ 
b/streams/src/main/java/org/apache/kafka/streams/processor/internals/assignment/StickyTaskAssignor.java
@@ -91,6 +91,10 @@ public class StickyTaskAssignor implements TaskAssignor {
 
     private void assignActive() {
         final int totalCapacity = sumCapacity(clients.values());
+        if (totalCapacity == 0) {
+            throw new IllegalStateException("`totalCapacity` should never be 
zero.");
+        }
+
         final int tasksPerThread = allTaskIds.size() / totalCapacity;
         final Set<TaskId> assigned = new HashSet<>();