Skip to content

Commit

Permalink
Use local based ccache for Mac build instead of sscache. (dremio#28)
Browse files Browse the repository at this point in the history
* apacheGH-36209: [Java] Upgrade Netty due to security vulnerability (apache#36211)

Upgrading Netty dependency due to CVE GHSA-6mjq-h674-j845
This also requires a patch to arrow-memory

Upgrading Netty, gRPC and Protobuf dependencies

Existing tests

No

**This PR contains a "Critical Fix".**

netty-handler SniHandler 16MB allocation

The SniHandler can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not have an idle timeout, it can be used to make a TCP server using the SniHandler to allocate 16MB of heap.

GHSA-6mjq-h674-j845

* Closes: apache#36209

Authored-by: Bryan Cutler <[email protected]>
Signed-off-by: David Li <[email protected]>

* Restore jackson version.

* Use local based ccache for Mac build instead of sscache.

---------

Signed-off-by: David Li <[email protected]>
Co-authored-by: Bryan Cutler <[email protected]>
  • Loading branch information
lriggs and BryanCutler committed Apr 25, 2024
1 parent b368a05 commit 8404e8f
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion dev/tasks/java-jars/github.yml
Original file line number Diff line number Diff line change
Expand Up @@ -130,7 +130,7 @@ jobs:
brew bundle --file=arrow/java/Brewfile
- name: Build C++ libraries
env:
{{ macros.github_set_sccache_envvars()|indent(8) }}
ARROW_USE_CCACHE: "ON"
run: |
set -e
# make brew Java available to CMake
Expand Down

0 comments on commit 8404e8f

Please sign in to comment.