kbear

kbear copied to clipboard

想咨询一个问题，我看此项目最后一次更新是2020年的，后续还会不会再继续更新，并做长期维护，谢谢 ^_^

yanming-zhang

https://github.com/ctripcorp/kbear/blob/f9916740c386e927626e45257a7a10c1cadca4ff/java/pom.xml#L68 CVE-2020-5421 Recommended upgrade version：2.1.17.RELEASE

QiAnXinCodeSafe

https://github.com/ctripcorp/kbear/blob/f9916740c386e927626e45257a7a10c1cadca4ff/java/pom.xml#L65 CVE-2018-17196 CVE-2019-12399 Recommended upgrade version：2.1.0.3.4.0.2-1

QiAnXinCodeSafe

_producerListeners 应该调整下结构

1

private ConcurrentHashMap _producerListeners , 假设，现在用户使用sdk 并且利用多线程，创建producer ，那么对于_producerListeners，就会出现，覆盖 ，可以利用 ConcurrentHashMap 定义 _producerListeners

xinzhuxiansheng

//已经close closeConsumer(oldConsumerHolder); ConsumerHolder newConsumerHolder = getOrAddConsumer(topicId); if (oldConsumerHolder.getAssignments() != null) { newConsumerHolder.setAssignments(oldConsumerHolder.getAssignments()); // oldCOnsumerHolder.getConsumer() 没必须要assign了吧，作者，这里是笔误？ 有点没太明白 oldConsumerHolder.getConsumer().assign(oldConsumerHolder.getAssignments()); } else if (oldConsumerHolder.getConsumerRebalanceListener() != null) { newConsumerHolder.setConsumerRebalanceListener(oldConsumerHolder.getConsumerRebalanceListener()); newConsumerHolder.getConsumer().subscribe(Arrays.asList(topicId), oldConsumerHolder.getConsumerRebalanceListener()); } else {...

xinzhuxiansheng