[jira] [Comment Edited] (DRILL-8240) Revisit clone of log4j Strings class

["James Turton (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/DRILL-8240?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17543919#comment-17543919 ] 

James Turton edited comment on DRILL-8240 at 5/30/22 12:21 PM:
---------------------------------------------------------------

[~pj.fanning] I admit to only having skimmed the background info so far, but can we remove our copy of this log4j class? Or shade it into a different package if we must keep it?


was (Author: dzamo):
[~pj.fanning] I admit to only having skimmed the background info so far, but can we remove our copy of this log4j class? Or shade it to a different package?

> Revisit clone of log4j Strings class
> ------------------------------------
>
>                 Key: DRILL-8240
>                 URL: https://issues.apache.org/jira/browse/DRILL-8240
>             Project: Apache Drill
>          Issue Type: Improvement
>          Components: Functions - Hive
>    Affects Versions: 1.20.1
>            Reporter: PJ Fanning
>            Priority: Major
>
> See https://issues.apache.org/jira/browse/DRILL-8044 for background.
> The code added there is now out of date. After the log4j panic late last year, 5 commits were made to modify the real log4j class and these are missing from the Drill copy.
> Compare https://github.com/apache/logging-log4j2/commits/rel/2.17.2/log4j-api/src/main/java/org/apache/logging/log4j/util/Strings.java to https://github.com/apache/logging-log4j2/commits/rel/2.14.1/log4j-api/src/main/java/org/apache/logging/log4j/util/Strings.java
> The Drill copy is based on Log4J 2.14.1. Every commit in 2021 and 2022 is missing from the Drill copy.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)