[
https://issues.apache.org/jira/browse/IMPALA-15382?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18117850#comment-18117850
]
ASF subversion and git services commented on IMPALA-15382:
----------------------------------------------------------
Commit 3f2973b2b0dffa3542a089ca6e0ddc6cbe410c07 in impala's branch
refs/heads/master from Aleksandr Efimov
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=3f2973b2b ]
IMPALA-15382: Propagate request pool JNI errors
ResolveRequestPool() ignored the status from JniUtil::CallJniMethod()
and then inspected a default result. If Java threw during short-name
conversion or pool resolution, the client could see denied access
with an empty pool.
Return the JNI error before inspecting the result. Add a backend
regression test for short-name conversion failures.
Testing:
- AdmissionControllerTest.ResolveRequestPoolJniError
Change-Id: I89ea3edfa725e87ebc513b35308c45992e37896a
Assisted-by: gpt-5.6-sol (OpenAI Codex)
Reviewed-on: http://gerrit.cloudera.org:8080/24895
Reviewed-by: Impala Public Jenkins <[email protected]>
Tested-by: Impala Public Jenkins <[email protected]>
> Request pool resolution ignores JNI errors
> ------------------------------------------
>
> Key: IMPALA-15382
> URL: https://issues.apache.org/jira/browse/IMPALA-15382
> Project: IMPALA
> Issue Type: Bug
> Components: Backend
> Reporter: Aleksandr Efimov
> Assignee: Aleksandr Efimov
> Priority: Major
>
> RequestPoolService::ResolveRequestPool() stores the status returned by
> JniUtil::CallJniMethod() but does not check it before reading the result. If
> the Java call throws while converting a user principal or resolving a pool,
> the default result is read instead. The client can then receive a misleading
> denied-access error with an empty resolved pool, while the original JNI error
> is lost. Return the JNI status before inspecting the result and add a backend
> regression test that verifies a short-name conversion error is propagated.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
