[ 
https://issues.apache.org/jira/browse/CASSANDRA-21150?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18056885#comment-18056885
 ] 

Arvind Kandpal commented on CASSANDRA-21150:
--------------------------------------------

Hi [~dnk],

I have analyzed the failure in VerifyTest.testVerifyCorruptRowCorrectDigest.

The root cause is indeed the library swap to `at.yawk.lz4` (related to 
CVE-2025-12183). The new "safe" implementation of the decompressor throws 
`IndexOutOfBoundsException` instead of `LZ4Exception` when encountering corrupt 
data (specifically invalid lengths that cause array boundary violations).

Since LZ4Compressor was only catching LZ4Exception, the RuntimeException was 
bubbling up and causing the test to fail.

I have submitted a PR that catches IndexOutOfBoundsException in LZ4Compressor 
and wraps it in an IOException, which fixes the test failure and restores 
proper corruption handling.

Please take a look and tell me if need changes.

> Test failure: 
> org.apache.cassandra.io.sstable.VerifyTest.testVerifyCorruptRowCorrectDigest
> ------------------------------------------------------------------------------------------
>
>                 Key: CASSANDRA-21150
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-21150
>             Project: Apache Cassandra
>          Issue Type: Bug
>            Reporter: Dmitry Konstantinov
>            Assignee: Arvind Kandpal
>            Priority: Normal
>         Attachments: image-2026-01-31-16-46-01-322.png
>
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> [butler link 
> |https://butler.cassandra.apache.org/#/ci/upstream/workflow/Cassandra-trunk/failure/org.apac[…]o.sstable/VerifyTest/testVerifyCorruptRowCorrectDigest]
> this test looks like has an explicit breaking point + it fails only for 
> compression config profile + 
> https://ci-cassandra.apache.org/job/Cassandra-trunk/2367/
> so an issue could be between 
> https://github.com/apache/cassandra/commit/ec3b425c38d92d20d77d3a87c782ed9c072e1cd9
>  (exclusive) and 
> https://github.com/apache/cassandra/commit/3c69bd23673caa40b22f3500a3e3eecabc25c8e5
>  commits
> !image-2026-01-31-16-46-01-322.png|width=600!



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to