You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@madlib.apache.org by "Frank McQuillan (JIRA)" <ji...@apache.org> on 2016/03/02 19:55:18 UTC

[jira] [Issue Comment Deleted] (MADLIB-617) Sketch estimators make unsafe use of user supplied parameters

     [ https://issues.apache.org/jira/browse/MADLIB-617?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Frank McQuillan updated MADLIB-617:
-----------------------------------
    Comment: was deleted

(was: SVM has been re-written from scratch for v1.9 so closing)

> Sketch estimators make unsafe use of user supplied parameters
> -------------------------------------------------------------
>
>                 Key: MADLIB-617
>                 URL: https://issues.apache.org/jira/browse/MADLIB-617
>             Project: Apache MADlib
>          Issue Type: Bug
>            Reporter: Caleb Welton
>            Assignee: Frank McQuillan
>            Priority: Critical
>
> In review of MADlib-567 it became clear that there are some followup tasks to clean up the sketch based estimators.
> Currently we pass user supplied bytea fields into the functions and treat the contents of that bytea as a pointer that we think we can safely follow.  This is not safe coding practice and can result in severe security issues.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)