Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[GH-16351] Do not call System.exit from water.tools #16366

Open
wants to merge 4 commits into
base: rel-3.46.0
Choose a base branch
from

Conversation

krasinski
Copy link
Member

fix #16351

@krasinski krasinski self-assigned this Aug 14, 2024
@krasinski krasinski linked an issue Aug 14, 2024 that may be closed by this pull request
@wendycwong
Copy link
Contributor

@krasinski

Your fix has stopped h2o-3 cluster from crashing. I ran the following:

curl http://localhost:54321/99/Rapids --data-urlencode 'ast=(run_tool "MojoConvertTool" ["", "", "", ""])'

and got the following result:

image

From talking to @mmalohlava , he does not want to see the whole stack, just the error message which in this case is

"Caused by:java.lang.IllegalArgumentException: Specified MOJO file (/Users/wendycwong/h2o-3) doesn't exist!",

I took a look and think this is the file that passes everything over:

RapidsHandler.java around line 38 where the whole stack errors are passed as well.

image

mainInternal(args);
}
catch (IllegalArgumentException e) {
System.err.println(e.getMessage());
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please make sure this only print out the actual error message and not the whole stack.

@wendycwong
Copy link
Contributor

I ran your code again today (sept 4, 2024) but still got the following:

image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Fix CVE-2024-5979 AstRunTool
2 participants