[
https://issues.apache.org/jira/browse/HIVE-28782?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Dmitriy Fingerman updated HIVE-28782:
-------------------------------------
Description:
Hive has code locations where it splits a URI on the first ":" assuming that it
delimits a host from a port.
This is unsafe in a dual-stack or IPv6-only world.
* HS2ActivePassiveHARegistry.updateEndpoint
* ZooKeeperHiveClientHelper.updateParamsWithZKServerNode
Example:
{code:java}
final String[] tokens = instanceUri.split(":");
final String hostname = tokens[0];
final int port = Integer.parseInt(tokens[1]);{code}
Similar issue in Hadoop:
https://issues.apache.org/jira/browse/HADOOP-12122
was:
Hive has code locations where it splits a URI on the first ":" assuming that
delimits a host from a port.
This is unsafe in a dual-stack or IPv6-only world.
* HS2ActivePassiveHARegistry.updateEndpoint
* ZooKeeperHiveClientHelper.updateParamsWithZKServerNode
Example:
{code:java}
final String[] tokens = instanceUri.split(":");
final String hostname = tokens[0];
final int port = Integer.parseInt(tokens[1]);{code}
Similar issue in Hadoop:
https://issues.apache.org/jira/browse/HADOOP-12122
> Fix Hive should avoid unsafe split on URIs that might contain IPv6 literals
> ---------------------------------------------------------------------------
>
> Key: HIVE-28782
> URL: https://issues.apache.org/jira/browse/HIVE-28782
> Project: Hive
> Issue Type: Sub-task
> Reporter: Dmitriy Fingerman
> Priority: Major
>
> Hive has code locations where it splits a URI on the first ":" assuming that
> it delimits a host from a port.
> This is unsafe in a dual-stack or IPv6-only world.
> * HS2ActivePassiveHARegistry.updateEndpoint
> * ZooKeeperHiveClientHelper.updateParamsWithZKServerNode
> Example:
> {code:java}
> final String[] tokens = instanceUri.split(":");
> final String hostname = tokens[0];
> final int port = Integer.parseInt(tokens[1]);{code}
> Similar issue in Hadoop:
> https://issues.apache.org/jira/browse/HADOOP-12122
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
