cassandra/tools
Jeremiah Jordan 26d7b166ba
Verify extension type before initializing reflectively-loaded classes
Cassandra resolves pluggable extensions by class name from configuration, schema, and tooling
inputs. These names were loaded with an initializing Class.forName(name) and type-checked only
afterward, so the named class ran its static initializer before its type was confirmed. After this
change such classes will be loaded without initialization, verified against the expected interface or
base class, and initialized only through normal use after validation.

A shared FBUtilities.classForNameWithoutInitialization helper and typed
instanceOrConstruct/construct overloads apply this to the configurable extension points loaded by
class name: the authentication, authorization, role-management, network and
internode-authenticator backends, the partitioner, audit logger, configuration loader, seed provider,
snitch, abstract types, secondary and custom indexes, compaction strategy, compressor, replication
strategy, SASI analyzers, key and cache providers, query handler, storage and stream hooks, tracing,
the JMX authorization proxy, MBeans, the monotonic clock, nodetool Sjk, triggers, the
sstableloader and stress class options, and diagnostic event classes (loaded without initialization
and checked against DiagnosticEvent, preserving the InvalidClassException contract and the existing
package restriction).

Regression tests confirm that an invalid-type load is rejected without initializing the target
class, and that valid implementations still resolve.

Hadoop client integration and hard-coded JDK and internal class probes are left unchanged.

patch by Jeremiah Jordan; reviewed by Stefan Miklosovic for CASSANDRA-21525
2026-07-20 20:03:45 +02:00
..
bin Fix preparation of CLASSPATH in tools/bin/cassandra.in.sh for development builds 2025-01-29 16:08:39 +01:00
fqltool Support null column value tombstones in FQL batch statements 2025-03-06 10:56:49 -06:00
stress Verify extension type before initializing reflectively-loaded classes 2026-07-20 20:03:45 +02:00
cqlstress-counter-example.yaml Add sequence distribution type to cassandra stress: fix problem with setSeed() 2016-10-24 11:09:04 +08:00
cqlstress-example.yaml Add sequence distribution type to cassandra stress: fix problem with setSeed() 2016-10-24 11:09:04 +08:00
cqlstress-insanity-example.yaml Add sequence distribution type to cassandra stress: fix problem with setSeed() 2016-10-24 11:09:04 +08:00
cqlstress-lwt-example.yaml Add stress profile yaml with LWT 2017-08-31 06:42:41 -07:00