HIVE-25054: (2.3) Drop vulnerable jodd-core dependency

pom.xml

@@ -165,7 +165,6 @@
     <jline.version>2.12</jline.version>
     <jms.version>2.0.2</jms.version>
     <joda.version>2.8.1</joda.version>
-    <jodd.version>3.5.2</jodd.version>
     <json.version>1.8</json.version>
     <junit.version>4.11</junit.version>
     <kryo.version>3.0.3</kryo.version>
@@ -1120,6 +1119,7 @@
 	    <exclude>**/sit</exclude>
         <exclude>**/test/queries/**/*.sql</exclude>
         <exclude>**/PriorityBlockingDeque.java</exclude>
+        <exclude>**/ql/io/parquet/timestamp/datetime/**</exclude>
 	  </excludes>
 	</configuration>
       </plugin>

ql/pom.xml

@@ -325,11 +325,6 @@
       <artifactId>groovy-all</artifactId>
       <version>${groovy.version}</version>
     </dependency>
-    <dependency>
-      <groupId>org.jodd</groupId>
-      <artifactId>jodd-core</artifactId>
-      <version>${jodd.version}</version>
-    </dependency>
     <dependency>
       <groupId>com.fasterxml.jackson.core</groupId>
       <artifactId>jackson-annotations</artifactId>
@@ -879,7 +874,6 @@
                   <include>javax.jdo:jdo-api</include>
                   <include>commons-lang:commons-lang</include>
                   <include>org.apache.commons:commons-lang3</include>
-                  <include>org.jodd:jodd-core</include>
                   <include>com.tdunning:json</include>
                   <include>org.apache.avro:avro</include>
                   <include>org.apache.avro:avro-mapred</include>

ql/src/java/org/apache/hadoop/hive/ql/io/parquet/timestamp/NanoTimeUtils.java

@@ -19,7 +19,7 @@
 import java.util.TimeZone;
 import java.util.concurrent.TimeUnit;
 
-import jodd.datetime.JDateTime;
+import org.apache.hadoop.hive.ql.io.parquet.timestamp.datetime.JDateTime;
 
 /**
  * Utilities for converting from java.sql.Timestamp to parquet timestamp.

ql/src/java/org/apache/hadoop/hive/ql/io/parquet/timestamp/datetime/DateTimeStamp.java

@@ -0,0 +1,53 @@
+// Copyright (c) 2003-2014, Jodd Team (jodd.org). All Rights Reserved.
+
+package org.apache.hadoop.hive.ql.io.parquet.timestamp.datetime;
+
+
+import java.io.Serializable;
+
+
+/**
+ * Generic date time stamp just stores and holds date and time information.
+ * This class does not contain any date/time logic, neither guarantees
+ * that date is valid.
+ *
+ * @see JDateTime
+ * @see JulianDateStamp
+ */
+public class DateTimeStamp implements Serializable {
+
+	/**
+	 * Year.
+	 */
+	public int year;
+
+	/**
+	 * Month, range: [1 - 12]
+	 */
+	public int month = 1;
+
+	/**
+	 * Day, range: [1 - 31]
+	 */
+	public int day = 1;
+
+	/**
+	 * Hour, range: [0 - 23]
+	 */
+	public int hour;
+
+	/**
+	 * Minute, range [0 - 59]
+	 */
+	public int minute;
+
+	/**
+	 * Second, range: [0 - 59]
+	 */
+	public int second;
+
+	/**
+	 * Millisecond, range: [0 - 1000]
+	 */
+	public int millisecond;
+}