search

apache / iceberg

Apache Iceberg
https://iceberg.apache.org/
Apache License 2.0
6.22k stars 2.17k forks source link

Possible heap data corruption of `org.apache.iceberg.rest.auth.OAuth2Util.AuthSession#headers` #10591

Closed snazy closed 2 months ago

snazy commented 3 months ago

Apache Iceberg version

None

Query engine

None

Please describe the bug 🐞

The operation on the volatile org.apache.iceberg.rest.auth.OAuth2Util.AuthSession#headers is not atomic.

adutra commented 3 months ago

FYI the operation in question is this:

https://github.com/apache/iceberg/blob/3d3e565a793280f2925114ada9d853ea304d6b9b/core/src/main/java/org/apache/iceberg/rest/auth/OAuth2Util.java#L581