Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

Is the same java byte code injection used for Instrumentation feature of JIRA?

Shineed Basheer August 4, 2012

Documenatation provided regrading Server Instrumenation is not complete. We are using JIRA in our production. Is their is any risk in using byte code injected code in production.

1 answer

1 accepted

0 votes
Answer accepted
Nic Brough -Adaptavist-
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
August 4, 2012

If you mean you're altering core functionality by injecting classes into a production instance, then absolutely, yes, you're exposing yourself to instability, performance and security issues by injecting byte code.

Shineed Basheer August 5, 2012

Then why JIRA team includes this feature in their product. Then with out this instrumentation, how they achieve the Server Instrumentation Feature.

Nic Brough -Adaptavist-
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
August 5, 2012

And they accept the risks, and they know what they wrote.

By the way, most people won't know what you're talking about here, and I'm not qualified to talk about a lot of it (my objection to it is generalised and learned the hard way - seeing it done in a trading system which then misplaced millions of dollars and no-one could unravel quite why)

Shineed Basheer August 5, 2012

Hi Nic Brough,

Thank you very much for your response. If my question is out of the context,pls forgive. Let me ask one more doubt. Can we use Dynamic Byte Code Instrumentation not for achieving core functionality. Say for example, Logging, Profiling etc. So that injection is done only when it required and retransform it to previous state after the use. But all these things should be done in production environment.

Nic Brough -Adaptavist-
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
August 5, 2012

Yes, subject to the caveats above - get DBI wrong, even for basic profiling, and you can kill your service.

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events