liyang created KYLIN-6126:
-----------------------------
Summary: Potential stack exhaustion issue in SQL expression parsers
Key: KYLIN-6126
URL: https://issues.apache.org/jira/browse/KYLIN-6126
Project: Kylin
Issue Type: Bug
Affects Versions: 5.0.5
Reporter: liyang
Assignee: liyang
Fix For: 5.0.6
Deeply nested parenthesized SQL causes unbounded recursive calls in the SQL
whitespace and escape normalization parsers. A caller-controlled query can
exhaust the JVM stack before normal SQL validation completes.
Fix direction: enforce a conservative maximum expression nesting depth in both
parser grammars and fail with a parse exception before recursion reaches the
stack limit.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
