Skip to content

gRPC upgrade to v1.62.0#432

Merged
Sacheta-NI merged 10 commits intoni:masterfrom
Sacheta-NI:grpc_upgrade_62_windows
Apr 30, 2025
Merged

gRPC upgrade to v1.62.0#432
Sacheta-NI merged 10 commits intoni:masterfrom
Sacheta-NI:grpc_upgrade_62_windows

Conversation

@Sacheta-NI
Copy link
Copy Markdown
Collaborator

@Sacheta-NI Sacheta-NI commented Apr 22, 2025

Upgraded the gRPC submodule from v1.44 to v1.62.0 to address multiple security vulnerabilities (CVE-2023-44487, CVE-2023-4785, CVE-2023-33953).

Temporarily disabled LVMessageEfficient due to a breaking change in the updated Protobuf library:
RepeatedField no longer supports the char type, which was used in the LVMessageEfficient class.
For now, the system falls back to using the LVMessage class. A permanent fix will be addressed separately.

Testing

  1. Windows (32-bit and 64-bit):

    • Automated tests executed using the New_ATS test suite.
    • Manual LabVIEW client testing performed against New_ATS test cases.
  2. Verified that LVMessageEfficient is properly disabled through feature toggle testing.

  3. Linux testing has not been performed. During early validation only, we observed that several code generation VIs use hardcoded Windows-style paths instead of building paths dynamically with the "Build Path" node. These hardcoded paths are incompatible with Linux It must not be working even currently. Path corrections and Linux validation will be addressed separately.

Signed-off-by: Sacheta-NI <sacheta@ni.com>
Signed-off-by: Sacheta-NI <sacheta@ni.com>
Signed-off-by: Sacheta . <sacheta@ni.com>
@jasonmreding
Copy link
Copy Markdown
Collaborator

What testing has been done as part of this change?

Copy link
Copy Markdown
Collaborator

@jasonmreding jasonmreding left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Waiting for changes to be reverted or confirmation via testing that serialization from a LV client for an array of messages works.

Sacheta-NI and others added 5 commits April 24, 2025 02:35
Signed-off-by: Sacheta . <sacheta@ni.com>
Signed-off-by: Sacheta-NI <sacheta@emerson.com>
…isabled

Signed-off-by: Sacheta-NI <sacheta@ni.com>
…nto grpc_upgrade_62_windows

Merging changes from main branch
Signed-off-by: Sacheta-NI <sacheta@ni.com>
@jasonmreding
Copy link
Copy Markdown
Collaborator

Linux testing has not been performed due to hardcoded paths in VIs which are compatible with windows, not Linux. It must not working even currently. Path corrections and Linux validation will be addressed separately.

Can you elaborate on this a bit? Is this an issue with the lookup path for the grpc library on Linux?

Sacheta-NI and others added 2 commits April 30, 2025 01:46
Signed-off-by: Sacheta . <sacheta@ni.com>
Signed-off-by: Sacheta-NI <sacheta@emerson.com>
@Sacheta-NI Sacheta-NI merged commit 197cf69 into ni:master Apr 30, 2025
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants