[fix](multi-catalog) SecureRandom is used to replace Random in FederationBackendPolicy to enhance security (#24860)

This commit is contained in:
zy-kkk
2023-09-26 10:44:22 +08:00
committed by GitHub
parent e887653dde
commit 33630e1c4d

View File

@ -41,11 +41,11 @@ import org.apache.logging.log4j.LogManager;
import org.apache.logging.log4j.Logger;
import java.nio.charset.StandardCharsets;
import java.security.SecureRandom;
import java.util.Collection;
import java.util.Collections;
import java.util.List;
import java.util.Map;
import java.util.Random;
import java.util.Set;
import java.util.stream.Collectors;
@ -53,7 +53,7 @@ public class FederationBackendPolicy {
private static final Logger LOG = LogManager.getLogger(FederationBackendPolicy.class);
private final List<Backend> backends = Lists.newArrayList();
private final Map<String, List<Backend>> backendMap = Maps.newHashMap();
private final Random random = new Random(System.currentTimeMillis());
private final SecureRandom random = new SecureRandom();
private ConsistentHash<TScanRangeLocations, Backend> consistentHash;
private int nextBe = 0;