You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@knox.apache.org by "Philip Zampino (Jira)" <ji...@apache.org> on 2020/02/12 18:23:00 UTC

[jira] [Assigned] (KNOX-2233) DefaultKeystoreService getCredentialForCluster uses cache without synchronization

     [ https://issues.apache.org/jira/browse/KNOX-2233?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Philip Zampino reassigned KNOX-2233:
------------------------------------

    Assignee: Philip Zampino

> DefaultKeystoreService getCredentialForCluster uses cache without synchronization
> ---------------------------------------------------------------------------------
>
>                 Key: KNOX-2233
>                 URL: https://issues.apache.org/jira/browse/KNOX-2233
>             Project: Apache Knox
>          Issue Type: Bug
>          Components: Server
>    Affects Versions: 1.4.0
>            Reporter: Philip Zampino
>            Assignee: Philip Zampino
>            Priority: Major
>
> The getCredentialForCluster(String, String) method of DefaultKeystoreService invokes checkCache(String, String) and addToCache(String, String) without any synchronization, despite the comments on those methods indicating that they are only called within critical sections of other methods. This method should be synchronized similar to what is done for the addCredentialForCluster(String, String, String) and removeCredentialForCluster(String, String) method implementations therein.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)