Trino

Coordinator crashes from Ranger plugin JavaScript policy memory leak

critical
Resource ContentionUpdated Mar 12, 2026(via Exa)
Technologies:
How to detect:

When Trino coordinator uses Ranger plugin with policy conditions containing JavaScript and regex, heap memory continuously fills until coordinator crashes. Heap dumps show GraalVM Truffle objects (JSFunctionObject$Unbound, TruffleString) accumulating 700+ GB with no GC cleanup, even after removing regex/functions from policies. Affects Trino 476 with Ranger plugin 476.

Recommended action:

Immediate: Remove JavaScript and regex from Ranger policy conditions to stop leak. Take heap dumps to confirm Truffle/GraalVM object accumulation. Long-term: Upgrade to Ranger 3.0 which includes fixes for JavaScript evaluation object thrashing. Monitor heap usage trends via heap_memory.used metric approaching heap_memory.max. Consider coordinator heap size increase as temporary mitigation.