You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@knox.apache.org by "Philip Zampino (Jira)" <ji...@apache.org> on 2020/02/12 18:22:00 UTC

[jira] [Created] (KNOX-2233) DefaultKeystoreService getCredentialForCluster uses cache without synchronization

Philip Zampino created KNOX-2233:
------------------------------------

             Summary: DefaultKeystoreService getCredentialForCluster uses cache without synchronization
                 Key: KNOX-2233
                 URL: https://issues.apache.org/jira/browse/KNOX-2233
             Project: Apache Knox
          Issue Type: Bug
          Components: Server
    Affects Versions: 1.4.0
            Reporter: Philip Zampino


The getCredentialForCluster(String, String) method of DefaultKeystoreService invokes checkCache(String, String) and addToCache(String, String) without any synchronization, despite the comments on those methods indicating that they are only called within critical sections of other methods. This method should be synchronized similar to what is done for the addCredentialForCluster(String, String, String) and removeCredentialForCluster(String, String) method implementations therein.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)