[GitHub] [spark] sunchao commented on pull request #35646: [SPARK-37090][BUILD][3.2] Upgrade libthrift to 0.16.0 to avoid security vulnerabilities

[GitBox <gi...@apache.org>]

sunchao commented on pull request #35646:
URL: https://github.com/apache/spark/pull/35646#issuecomment-1056025564


   Hi @wangyum @srowen , after picking up this change and deploy it internally, we found an issue that seems to be related:
   
   ```
   Receiver class org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport does not define or inherit an implementation of the resolved method 'abstract void checkReadBytesAvailable(long)' of abstract class org.apache.thrift.transport.TTransport.
   org.apache.thrift.protocol.TBinaryProtocol.checkStringReadLength(TBinaryProtocol.java:444)
   org.apache.thrift.protocol.TBinaryProtocol.readStringBody(TBinaryProtocol.java:415)
   org.apache.thrift.protocol.TBinaryProtocol.readString(TBinaryProtocol.java:411)
   org.apache.thrift.protocol.TBinaryProtocol.readMessageBegin(TBinaryProtocol.java:251)
   org.apache.thrift.TServiceClient.receiveBase(TServiceClient.java:77)
   org.apache.hadoop.hive.metastore.api.ThriftHiveMetastore$Client.recv_get_table(ThriftHiveMetastore.java:1514)
   org.apache.hadoop.hive.metastore.api.ThriftHiveMetastore$Client.get_table(ThriftHiveMetastore.java:1500)
   org.apache.hadoop.hive.metastore.HiveMetaStoreClient.getTable(HiveMetaStoreClient.java:1370)
   org.apache.iceberg.hive.HiveTableOperations.lambda$doRefresh$0(HiveTableOperations.java:182)
   org.apache.iceberg.ClientPoolImpl.run(ClientPoolImpl.java:51)
   org.apache.iceberg.hive.CachedClientPool.run(CachedClientPool.java:76)
   org.apache.iceberg.hive.HiveTableOperations.doRefresh(HiveTableOperations.java:182)
   org.apache.iceberg.BaseMetastoreTableOperations.refresh(BaseMetastoreTableOperations.java:94)
   ```
   
   still investigating what exactly caused the error though. The `TUGIAssumingTransport` class is from Hive client side and seems it's used when talking to a secure HMS via either delegation token or kerberos.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org