junwen yang created HDFS-16007:
----------------------------------

             Summary: Vulnerabilities found when serializing enum value
                 Key: HDFS-16007
                 URL: https://issues.apache.org/jira/browse/HDFS-16007
             Project: Hadoop HDFS
          Issue Type: Improvement
            Reporter: junwen yang


ReplicaState enum is using ordinal to conduct serialization and 
deserialization, which is vulnerable to the order, to cause issues similar to 
HDFS-15624.

To avoid it, either adding comments to let later developer not to change this 
enum, or add index checking in the read and getState function to avoid index 
out of bound error. 



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-dev-unsubscr...@hadoop.apache.org
For additional commands, e-mail: hdfs-dev-h...@hadoop.apache.org

Reply via email to