Ismaël Mejía created AVRO-4280:
----------------------------------
Summary: [perl] Bound collection size when decoding arrays and maps
Key: AVRO-4280
URL: https://issues.apache.org/jira/browse/AVRO-4280
Project: Apache Avro
Issue Type: Sub-task
Components: perl
Affects Versions: 1.13.0
Reporter: Ismaël Mejía
{{decode_array()}} and {{decode_map()}} in
{{lang/perl/lib/Avro/BinaryDecoder.pm}} iterate {{for (1..$block_count)}} using
the block count read from input; the block size for negative blocks is read but
discarded, and no limit is applied.
Add a configurable maximum collection length, validated per block and
cumulatively, and fail decoding with a clear error when exceeded. Add a
corresponding test.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
