Skip to content

2023-01-27-release
Compare
Choose a tag to compare
@steveloughran steveloughran released this 27 Jan 16:56
· 42 commits to trunk since this release
tag-2023-01-27-release
6cc3713
This commit was signed with the committer’s verified signature.
steveloughran Steve Loughran
GPG key ID: D22CF846DBB162A0
Verified
Learn about vigilant mode.

new tarhardened command to verify the release has the fix for "HADOOP-18136. Verify FileUtils.unTar() handling of missing .tar files."

bin/hadoop jar cloudstore-1.0.jar tarhardened "file.tar; true"

Bad

Attempting to untar file with name "file.tar; true"
untar operation reported success

2023-01-27 16:42:35,931 [main] INFO  util.ExitUtil (ExitUtil.java:terminate(124)) - Exiting with status 0

Although the file doesn't exist, the bash "true" command was executed after the untar, so
the operation was reported as a success.

Good

2023-01-27 16:48:44,461 [main] INFO  util.ExitUtil (ExitUtil.java:terminate(210)) - Exiting with status -1: ExitCodeException exitCode=1: tar: Error opening archive: Failed to open 'file.tar; true'

The file file.tar; true was attempted to be opened; as it is not present the operation failed.
Expect a stack trace in the report

Assets 3
Loading