Siyao Meng created HDDS-16460:
---------------------------------

             Summary: Container delete leaves a zombie recoveringContainerMap 
entry (masked by scrub null guard)
                 Key: HDDS-16460
                 URL: https://issues.apache.org/jira/browse/HDDS-16460
             Project: Apache Ozone
          Issue Type: Bug
            Reporter: Siyao Meng


h3. Finding
The container delete path leaves a zombie recoveringContainerMap entry (no 
removeRecoveringContainer call). If the mask were absent the stale entry would 
drive the pre-HDDS-7842 unguarded scrub to NPE; at HEAD the consequence is 
prevented by the scrub null guard plus non-reused container IDs plus the 
HDDS-15791 auto-create rejection. Reachable via the public force-delete API but 
a hygiene/defensive gap only.

h3. Classification
* Verdict: MASKED
* Severity: Low
* Source: Specula TLA+ model checking and confirmation debate, finding MC-3

h3. Reproduce
{noformat}
Ozone commit: 9fbf9ee0cb1bd2f5f5d437b6719ebbe5309351fb
Specula:      v1.1.0 (commit c6aa3dfa)
Target:       dn-ec-reconstruction
Guidance:     
campaigns/ozone-9fbf9ee/targets/022-dn-ec-reconstruction/.prompt-extra.md
{noformat}
{code:none}
specula run --agent=claude-code --effort=high --keep-original --max-parallel=2 \
  --enable-reviews --confirm-debate --tlc-memory-limit=28G --tlc-worker-limit=8 
\
  "dn-ec-reconstruction|apache/ozone|Java|Use the target-specific 
.prompt-extra.md"
{code}
Discovered under HDDS-16433 (Specula TLA+ verification effort). The TLA+ 
specification, counterexample, and confirmation debate live in the Specula run 
artifacts.

Generated with Specula (Claude Opus 4.8).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to