hubcio opened a new pull request, #2527:
URL: https://github.com/apache/iggy/pull/2527

   Permissions::to_bytes() wrote has_streams=1 or has_topics=1 for
   Some(empty_map) but the for loop never executed, leaving no data
   or terminator. On deserialization, from_bytes() entered a loop
   expecting stream/topic data and panicked with "advance out of
   bounds" when calling get_u32_le() on an empty buffer. This caused
   server crashes on restart when users were created via web UI with
   empty permission maps. The fix filters out empty maps at the
   pattern match level, treating them as None during serialization.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to