You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@madlib.apache.org by "Frank McQuillan (JIRA)" <ji...@apache.org> on 2016/03/02 19:54:18 UTC

[jira] [Commented] (MADLIB-617) Sketch estimators make unsafe use of user supplied parameters

    [ https://issues.apache.org/jira/browse/MADLIB-617?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15176247#comment-15176247 ] 

Frank McQuillan commented on MADLIB-617:
----------------------------------------

SVM has been re-written from scratch for v1.9 so closing

> Sketch estimators make unsafe use of user supplied parameters
> -------------------------------------------------------------
>
>                 Key: MADLIB-617
>                 URL: https://issues.apache.org/jira/browse/MADLIB-617
>             Project: Apache MADlib
>          Issue Type: Bug
>            Reporter: Caleb Welton
>            Assignee: Jiali Yao
>            Priority: Critical
>
> In review of MADlib-567 it became clear that there are some followup tasks to clean up the sketch based estimators.
> Currently we pass user supplied bytea fields into the functions and treat the contents of that bytea as a pointer that we think we can safely follow.  This is not safe coding practice and can result in severe security issues.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)