#18669
88%
master: 89%

Ran 12 Jun 2023 08:27PM UTC

Jobs 1

Files 554

Run time 29s

Badge

Embed ▾

pending completion

Build # #18669

Build Type

push

github-actions

Committed by

ejona86

Commit Message

Upgrade netty-tcnative to 2.0.61.Final

This updates the version of boringssl and removes the dependency on APR.
netty-tcnative 2.0.56.Final uses APR 1.7.0, so is in scope for
CVE-2021-35940, CVE-2022-28331, and CVE-2022-24963. netty-tcnative is
not actually vulnerable. The binary does not include apr_socket_sendv(),
apr_encode_*(), apr_pencode_*(), apr_decode_*(), apr_pdecode_*(). The
binary does include apr_time_exp_*() but it is unused code.
Unfortunately --gc-sections wasn't used during compilation.
apr_time_now() is used, but that just calls gettimeofday() and is not
vulnerable.

There's no panic here, but this updates netty-tcnative just a few weeks
before we would have ordinarily done so. Bumping the version makes life
easier for everyone.

Run Details

30947 of 35074 relevant lines covered (88.23%)

0.88 hits per line

Uncovered Existing Lines

Lines	Coverage	∆	File
1	89.77	-0.23%	../netty/src/main/java/io/grpc/netty/NettyServerHandler.java
1	97.32	-0.89%	../okhttp/src/main/java/io/grpc/okhttp/OkHttpServerStream.java
2	90.63	-6.25%	../netty/src/main/java/io/grpc/netty/ClientTransportLifecycleManager.java
2	78.95	-2.11%	../okhttp/src/main/java/io/grpc/okhttp/ExceptionHandlingFrameWriter.java
5	87.24	-2.06%	../core/src/main/java/io/grpc/internal/DelayedClientCall.java

Jobs

ID	Job ID	Ran	Files	Coverage
1	#18669.1	12 Jun 2023 08:27PM UTC	554	88.23

grpc / grpc-java / #18669
88%
master: 89%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Uncovered Existing Lines

Jobs

Source Files on build #18669

grpc / grpc-java / #18669 88% master: 89%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Uncovered Existing Lines

Jobs

Source Files on build #18669

grpc / grpc-java / #18669
88%
master: 89%

README BADGES
x