[
https://issues.apache.org/jira/browse/HADOOP-8275?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13266290#comment-13266290
]
Colin Patrick McCabe commented on HADOOP-8275:
----------------------------------------------
bq. Forgot to mention, jira for other places where we need to use readVInt
range checking?
I think HDFS-3134 takes care of all the other cases. It also adds a fuzz
tester for the edit log.
I filed HDFS-3346 for FSImage fuzz testing.
> Range check DelegationKey length
> ---------------------------------
>
> Key: HADOOP-8275
> URL: https://issues.apache.org/jira/browse/HADOOP-8275
> Project: Hadoop Common
> Issue Type: Bug
> Affects Versions: 0.23.0
> Reporter: Colin Patrick McCabe
> Assignee: Colin Patrick McCabe
> Priority: Minor
> Fix For: 2.0.0
>
> Attachments: HADOOP-8275.001.patch, HADOOP-8275.002.patch,
> HADOOP-8275.003.patch
>
>
> Harden serialization logic against malformed or malicious input.
> Add range checking to readVInt, to detect overflows, underflows, and
> larger-than-expected values.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
