JingsongLi commented on PR #8819:
URL: https://github.com/apache/paimon/pull/8819#issuecomment-5057365862
- `TableDescriptorSerializer.java:80` has been modified to read the
persisted `schema-N`, which effectively prevents the leakage of dynamic
credentials and correctly rejects delegated/composite tables and non-main
branches.
- However, the input table may be a copy containing `scan.snapshot-id`,
`scan.tag-name`, or `scan.timestamp[-millis]`; these dynamic options are
removed by the persisted schema, and the descriptor lacks snapshot/time-travel
fields.
- The Rust reader reconstructs regular tables based solely on the
descriptor and ultimately reads the latest snapshot rather than the one seen by
the planner, which constitutes **silent reading of incorrect data**.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
