[
https://issues.apache.org/jira/browse/MAPREDUCE-5208?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13655091#comment-13655091
]
Omkar Vinit Joshi commented on MAPREDUCE-5208:
----------------------------------------------
Updating test case. Testing ShuffleHandler using HTTP request. Updating error
message sent by the server. Instead of just sending "ERROR ON SERVER" now
sending all wrapped exceptions. Avoiding explicitly to send the whole stack
trace.
> SpillRecord and ShuffleHandler should use SecureIOUtils for reading index
> file and map output
> ---------------------------------------------------------------------------------------------
>
> Key: MAPREDUCE-5208
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-5208
> Project: Hadoop Map/Reduce
> Issue Type: Bug
> Reporter: Omkar Vinit Joshi
> Assignee: Omkar Vinit Joshi
> Attachments: MAPREDUCE-5208-20130506.patch,
> MAPREDUCE-5208-20130507.patch
>
>
> ShuffleHandler (map output file) and SpillRecord (index file) are reading
> file using unsecured input stream. There exists a possibility for symlink
> attack. related to YARN-578 . Creating this issue to track map reduce changes.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
