How to secure thrift server crash if receives invalid data

Question

Can anyone explain how to secure thrift server crash if receives invalid data?

Answer 1

Hey,

The Thrift server may crash if it receives a large amount of invalid data, this happens when the Thrift server allocates memory to check the validity of data it receives. If it receives a large amount of invalid data, it may need to allocate more memory than is available. This is due to a limitation in the Thrift library itself.

To prevent the possibility of crashes due to buffer overruns, use the framed and compact transport protocols. These protocols are disabled by default, because they may require changes to your client code. The two options to add to your hbase-site.xml are 

hbase.regionserver.thrift.framed    

and

hbase.regionserver.thrift.compact

Set each of these to true, as in the XML below.

<property>
  <name>hbase.regionserver.thrift.framed</name>
  <value>true</value>
</property>
<property> 

<property>
  <name>hbase.regionserver.thrift.compact</name>
  <value>true</value>
</property>