search

bluehalo / nifi-nar-bundles

Apache License 2.0
13 stars 0 forks source link

DecryptZip: Cleanup temp filesystem resources immediately #81

Closed tequalsme closed 5 years ago

tequalsme commented 5 years ago

When the DecryptZip processor is configured for AES256 decryption, zip files are temporarily copied to the filesystem for decryption. If decryption fails, the temporary filesystem resources are not immediately removed. This can lead to quickly filling up the /tmp volume.

This change ensures the resources are removed immediately, regardless of whether the decryption succeeded or failed.

rstjohn commented 5 years ago

Do you want to use this PR to update the security issue from jackson that github reports?

tequalsme commented 5 years ago

I don't see the security issue. Didn't you just update many of the dependencies?

This should be a drop-in replacement for you - because I ported it from your repo :)