You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues-all@impala.apache.org by "ASF subversion and git services (JIRA)" <ji...@apache.org> on 2018/04/27 20:48:00 UTC
[jira] [Commented] (IMPALA-6892) CheckHashAndDecrypt doesn't report
disk and host where the verification failed
[ https://issues.apache.org/jira/browse/IMPALA-6892?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16457045#comment-16457045 ]
ASF subversion and git services commented on IMPALA-6892:
---------------------------------------------------------
Commit 2c893f46bd630b42b96ade7694cb166515f20ef3 in impala's branch refs/heads/2.x from [~tarmstrong@cloudera.com]
[ https://git-wip-us.apache.org/repos/asf?p=impala.git;h=2c893f4 ]
IMPALA-6892: CheckHashAndDecrypt() includes file and host
The error text with AES-GCM enabled looks like:
Error reading 44 bytes from scratch file
'/tmp/impala-scratch/0:0_d43635d0-8f55-485e-8899-907af289ac86' on
backend tarmstrong-box:22000 at offset 0: verification of read data
failed.
OpenSSL error in EVP_DecryptFinal:
139634997483216:error:0607C083:digital envelope
routines:EVP_CIPHER_CTX_ctrl:no cipher set:evp_enc.c:610:
139634997483216:error:0607C083:digital envelope
routines:EVP_CIPHER_CTX_ctrl:no cipher set:evp_enc.c:610:
139634997483216:error:0607C083:digital envelope
routines:EVP_CIPHER_CTX_ctrl:no cipher set:evp_enc.c:610:
139634997483216:error:0607C083:digital envelope
routines:EVP_CIPHER_CTX_ctrl:no cipher set:evp_enc.c:610:
Testing:
Added a backend test to exercise the code path and verify the error
code.
Change-Id: I0652d6cdfbb4e543dd0ca46b7cc65edc4e41a2d8
Reviewed-on: http://gerrit.cloudera.org:8080/10204
Reviewed-by: Tim Armstrong <ta...@cloudera.com>
Tested-by: Impala Public Jenkins <im...@cloudera.com>
Reviewed-on: http://gerrit.cloudera.org:8080/10232
> CheckHashAndDecrypt doesn't report disk and host where the verification failed
> ------------------------------------------------------------------------------
>
> Key: IMPALA-6892
> URL: https://issues.apache.org/jira/browse/IMPALA-6892
> Project: IMPALA
> Issue Type: Bug
> Components: Backend
> Affects Versions: Impala 2.12.0
> Reporter: Mostafa Mokhtar
> Assignee: Tim Armstrong
> Priority: Major
> Labels: supportability
> Fix For: Impala 2.13.0, Impala 3.1.0
>
>
> Root causing block corruption is difficult because the Status message doesn't have the offending disk and host.
> {code}
> Query Type: QUERY
> Query State: EXCEPTION
> Query Status: Block verification failure
> {code}
> {code}
> Status TmpFileMgr::WriteHandle::CheckHashAndDecrypt(MemRange buffer) {
> DCHECK(FLAGS_disk_spill_encryption);
> SCOPED_TIMER(encryption_timer_);
> // GCM mode will verify the integrity by itself
> if (!key_.IsGcmMode()) {
> if (!hash_.Verify(buffer.data(), buffer.len())) {
> return Status("Block verification failure");
> }
> }
> return key_.Decrypt(buffer.data(), buffer.len(), buffer.data());
> }
> {code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org