Stupid-Dird opened a new issue #3676:
URL: https://github.com/apache/rocketmq/issues/3676


   Hello, I found a possible vulnerability scenario when reading the rocketmq 
source code.
   
   In class DefaultMQProducerImpl, there is a set of methods declared with 
request, as shown in the following figure
   
   
![1640697988(1)](https://user-images.githubusercontent.com/48325780/147570938-df1f95ed-e430-4f00-af85-86962b7b8ade.png)
   
   In this method, the invoke waitresponse method waits, and countdown() is 
performed in onexception in sendcallback; However, there is no countdown () in 
onsuccess (), so even if the transmission is successful, it will be blocked 
until the timeout
   
   In other similar methods, the onsuccess of requestcallback is not called
   
![1640698774(1)](https://user-images.githubusercontent.com/48325780/147572094-95fca573-9a85-41f2-ab0b-1837cf28af9b.png)
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to