DRILL-8443: Upgrade netty due to CVE

apache / drill

Apache Drill is a distributed MPP query layer for self describing data

https://drill.apache.org/

Apache License 2.0

1.93k stars 980 forks source link

DRILL-8443: Upgrade netty due to CVE #2813

Closed pjfanning closed 8 months ago

pjfanning commented 1 year ago

Description

https://github.com/apache/drill/security/dependabot/45

Testing

CI build

pjfanning commented 1 year ago

Some tests failing with this error - IO Running in secure mode, but config doesn't have a keytab

Seems like a Hadoop issue. We may need to upgrade Hadoop or at least review the Hadoop config used in the tests.

cgivre commented 1 year ago

@pjfanning I think we may have a CI issue. @vvysotskyi @jnturton Any ideas here? Could this be related to that issue we encountered before with the CI and connections?

vvysotskyi commented 1 year ago

Now tests for this PR fail for other reason (likely due to changes in the PR):

Error:  Failures: 
Error:    TestResultSetLoaderOmittedValues.testOmittedValuesAtEndWithOverflow:264 Row 0 col d should be null
Error:    TestResultSetLoaderOverflow.testBatchSizeLimit:164 expected:<16385> but was:<8193>
Error:    TestOutputBatchSize.testSizerRepeatedRepeatedList:2922 expected:<1048576> but was:<1048560>
Error:  Errors: 
Error:    TestResultSetLoaderOmittedValues>SubOperatorTest.classTeardown:39 » IllegalState Allocator[ROOT] closed with outstanding buffers allocated (9).

jnturton commented 8 months ago

@pjfanning @cgivre, @rymarm has made progress on this in #2857. Shall we close this one and try to get that one over the line?

pjfanning commented 8 months ago

sure - I haven't been looking at this