[ 
https://issues.apache.org/jira/browse/HADOOP-17083?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17143945#comment-17143945
 ] 

Ahmed Hussein commented on HADOOP-17083:
----------------------------------------

*findbugs Errors:*

*===========*

 

*FindBugs module: hadoop-common-project/hadoop-common*
 * Null passed for non-null parameter of writeXml(String, Writer) in 
org.apache.hadoop.conf.Configuration.writeXml(Writer) At Configuration.java:of 
writeXml(String, Writer) in 
org.apache.hadoop.conf.Configuration.writeXml(Writer) At 
Configuration.java:[line 3051]
 * Null passed for non-null parameter of 
com.google.common.base.Optional.fromNullable(Object) in 
org.apache.hadoop.conf.ReconfigurableBase$ReconfigurationThread.run() Method 
invoked at ReconfigurableBase.java:of 
com.google.common.base.Optional.fromNullable(Object) in 
org.apache.hadoop.conf.ReconfigurableBase$ReconfigurationThread.run() Method 
invoked at ReconfigurableBase.java:[line 151]

 

*FindBugs module: hadoop-hdfs-project/hadoop-hdfs*
 * Null passed for non-null parameter of 
com.google.common.base.Preconditions.checkState(boolean, String, Object, 
Object, Object) in 
org.apache.hadoop.hdfs.qjournal.server.Journal.getPersistedPaxosData(long) 
Method invoked at Journal.java:of 
com.google.common.base.Preconditions.checkState(boolean, String, Object, 
Object, Object) in 
org.apache.hadoop.hdfs.qjournal.server.Journal.getPersistedPaxosData(long) 
Method invoked at Journal.java:[line 1057]
 * Null passed for non-null parameter of 
com.google.common.base.Preconditions.checkArgument(boolean, String, Object) in 
org.apache.hadoop.hdfs.qjournal.server.JournalNode.getLogDir(String) Method 
invoked at JournalNode.java:of 
com.google.common.base.Preconditions.checkArgument(boolean, String, Object) in 
org.apache.hadoop.hdfs.qjournal.server.JournalNode.getLogDir(String) Method 
invoked at JournalNode.java:[line 256]
 * Nullcheck of jid at line 259 of value previously dereferenced in 
org.apache.hadoop.hdfs.qjournal.server.JournalNode.getLogDir(String) At 
JournalNode.java:259 of value previously dereferenced in 
org.apache.hadoop.hdfs.qjournal.server.JournalNode.getLogDir(String) At 
JournalNode.java:[line 256]

 

*FindBugs 
module:hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-resourcemanager*
 
 * Null passed for non-null parameter of 
com.google.common.util.concurrent.SettableFuture.set(Object) in 
org.apache.hadoop.yarn.server.resourcemanager.recovery.RMStateStore$UpdateAppTransition.transition(RMStateStore,
 RMStateStoreEvent) At RMStateStore.java:of 
com.google.common.util.concurrent.SettableFuture.set(Object) in 
org.apache.hadoop.yarn.server.resourcemanager.recovery.RMStateStore$UpdateAppTransition.transition(RMStateStore,
 RMStateStoreEvent) At RMStateStore.java:[line 267]
 * Null passed for non-null parameter of 
com.google.common.util.concurrent.SettableFuture.set(Object) in 
org.apache.hadoop.yarn.server.resourcemanager.scheduler.capacity.CapacityScheduler.updateApplicationPriority(Priority,
 ApplicationId, SettableFuture, UserGroupInformation) At 
CapacityScheduler.java:of 
com.google.common.util.concurrent.SettableFuture.set(Object) in 
org.apache.hadoop.yarn.server.resourcemanager.scheduler.capacity.CapacityScheduler.updateApplicationPriority(Priority,
 ApplicationId, SettableFuture, UserGroupInformation) At 
CapacityScheduler.java:[line 2335]

 

> Update guava to 27.0-jre in hadoop branch-2.10
> ----------------------------------------------
>
>                 Key: HADOOP-17083
>                 URL: https://issues.apache.org/jira/browse/HADOOP-17083
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: common, security
>    Affects Versions: 2.10.0
>            Reporter: Ahmed Hussein
>            Assignee: Ahmed Hussein
>            Priority: Major
>         Attachments: HADOOP-17083-branch-2.10.001.patch, 
> HADOOP-17083-branch-2.10.002.patch, HADOOP-17083-branch-2.10.003.patch
>
>
> com.google.guava:guava should be upgraded to 27.0-jre due to new CVE's found 
> [CVE-2018-10237|https://nvd.nist.gov/vuln/detail/CVE-2018-10237].
>  
> The upgrade should not affect the version of java used. branch-2.10 still 
> sticks to JDK7



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to