John Karp created AVRO-3049:
-------------------------------
Summary: Java: BinaryDecoder lacks checks on array length
Key: AVRO-3049
URL: https://issues.apache.org/jira/browse/AVRO-3049
Project: Apache Avro
Issue Type: Bug
Components: java
Reporter: John Karp
Assignee: John Karp
There are several checks on string length in BinaryDecoder. However, it lacks
the same checks for byte arrays.
* Negative lengths lead to IllegalArgumentException instead of
org.apache.avro.AvroRuntimeException
* Pathologically large (however legal) arrays can be allocated. Some
applications will be suffer denial of service if they are forced to allocate 1
GB arrays repeatedly.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
