You are viewing a plain text version of this content. The canonical link for it is here.

Posted to yarn-dev@hadoop.apache.org by "Yufei Gu (JIRA)" <ji...@apache.org> on 2017/04/21 04:29:04 UTC

[jira] [Created] (YARN-6506) Fix the code vulnerability of org.apache.hadoop.yarn.sls.SLSRunner.simulateInfoMap

Yufei Gu created YARN-6506:
------------------------------

             Summary: Fix the code vulnerability of org.apache.hadoop.yarn.sls.SLSRunner.simulateInfoMap
                 Key: YARN-6506
                 URL: https://issues.apache.org/jira/browse/YARN-6506
             Project: Hadoop YARN
          Issue Type: Sub-task
          Components: scheduler-load-simulator
            Reporter: Yufei Gu


It is reported by findbugs in YARN-6423.

MS_MUTABLE_COLLECTION: Field is a mutable collection

A mutable collection instance is assigned to a final static field, thus can be changed by malicious code or by accident from another package. Consider wrapping this field into Collections.unmodifiableSet/List/Map/etc. to avoid this vulnerability.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-dev-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-dev-help@hadoop.apache.org