[PR] Backport "HBASE-30264 Validate bulkToken path in cleanupBulkLoad (#8433)" to branch-3 [hbase]

["ndimiduk (via GitHub)" <gi...@apache.org>]

ndimiduk opened a new pull request, #8434:
URL: https://github.com/apache/hbase/pull/8434

   The cleanupBulkLoad RPC accepts a user-supplied bulkToken that is passed directly to fs.delete() without verifying that the path is within the expected staging directory. A misbehaving client or stale token could cause the RegionServer to delete paths outside the staging area.
   
   Add path validation to ensure the bulkToken resolves to a direct child of baseStagingDir before performing the delete.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@hbase.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] Backport "HBASE-30264 Validate bulkToken path in cleanupBulkLoad (#8433)" to branch-3 [hbase]

["ndimiduk (via GitHub)" <gi...@apache.org>]

ndimiduk merged PR #8434:
URL: https://github.com/apache/hbase/pull/8434


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@hbase.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org