Skip to content

Commit

Permalink
Use local based ccache for Mac build instead of sscache. (#28)
Browse files Browse the repository at this point in the history
* apacheGH-36209: [Java] Upgrade Netty due to security vulnerability (apache#36211)

Upgrading Netty dependency due to CVE GHSA-6mjq-h674-j845
This also requires a patch to arrow-memory

Upgrading Netty, gRPC and Protobuf dependencies

Existing tests

No

**This PR contains a "Critical Fix".**

netty-handler SniHandler 16MB allocation

The SniHandler can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not have an idle timeout, it can be used to make a TCP server using the SniHandler to allocate 16MB of heap.

GHSA-6mjq-h674-j845

* Closes: apache#36209

Authored-by: Bryan Cutler <cutlerb@gmail.com>
Signed-off-by: David Li <li.davidm96@gmail.com>

* Restore jackson version.

* Use local based ccache for Mac build instead of sscache.

---------

Signed-off-by: David Li <li.davidm96@gmail.com>
Co-authored-by: Bryan Cutler <cutlerb@gmail.com>
  • Loading branch information
2 people authored and DenisTarasyuk committed Dec 19, 2023
1 parent a981254 commit 31d8a1e
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion dev/tasks/java-jars/github.yml
Expand Up @@ -130,7 +130,7 @@ jobs:
brew bundle --file=arrow/java/Brewfile
- name: Build C++ libraries
env:
{{ macros.github_set_sccache_envvars()|indent(8) }}
ARROW_USE_CCACHE: "ON"
run: |
set -e
# make brew Java available to CMake
Expand Down

0 comments on commit 31d8a1e

Please sign in to comment.