You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@hbase.apache.org by "Nick Dimiduk (Jira)" <ji...@apache.org> on 2026/06/29 08:34:00 UTC

[jira] [Created] (HBASE-30264) Validate bulkToken path in SecureBulkLoadManager.cleanupBulkLoad

Nick Dimiduk created HBASE-30264:
------------------------------------

             Summary: Validate bulkToken path in SecureBulkLoadManager.cleanupBulkLoad
                 Key: HBASE-30264
                 URL: https://issues.apache.org/jira/browse/HBASE-30264
             Project: HBase
          Issue Type: Task
          Components: regionserver
            Reporter: Nick Dimiduk
            Assignee: Nick Dimiduk


The cleanupBulkLoad method in SecureBulkLoadManager constructs a Path directly from the bulkToken field of the CleanupBulkLoadRequest and passes it to fs.delete(path, true). The bulkToken is expected to be a staging directory created by prepareBulkLoad, which always places it under {hbase.rootdir}/staging/. However, cleanupBulkLoad does not verify that the supplied path is actually within the staging directory.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)