liuyifeng1992 commented on issue #1429: 
升级版本之后,所使用得netty版本还是4.1.36.Final,该版本存在CVE漏洞
URL: 
https://github.com/apache/servicecomb-java-chassis/issues/1429#issuecomment-560970650
 
 
   > 这个错误是watch变更失败,具体代码:
   > 
   > ```
   >             try {
   >               response = JsonUtils.readValue(bodyBuffer.getBytes(),
   >                   MicroserviceInstanceChangedEvent.class);
   >             } catch (Exception e) {
   >               LOGGER.error("watcher handle microservice {} response 
failed, {}",
   >                   selfMicroserviceId,
   >                   bodyBuffer.toString());
   >               return;
   >             }
   > ```
   > 
   > 看日志是会打印响应内容的,也可以调试看下e是什么。是否有影响需要结合你的环境看下,是否依赖于watch功能, 
ServcieCenter使用pull模式也是可以保持实例一致的,没有watch不会影响功能,但可能影响到实例变更检查的时效性 。
   
   debug调试后,bodyBuffer的内容如下
   UnpooledByteBufAllocator$InstrumentedUnpooledUnsafeHeapByteBuf(ridx: 0, 
widx: 0, cap: 0)
   然后异常e的堆栈如下
   com.fasterxml.jackson.databind.exc.MismatchedInputException: No content to 
map due to end-of-input
    at [Source: (byte[])""; line: 1, column: 0]

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

Reply via email to