Ismaël Mejía created AVRO-4281:
----------------------------------
Summary: [php] Bound collection size when decoding arrays and maps
Key: AVRO-4281
URL: https://issues.apache.org/jira/browse/AVRO-4281
Project: Apache Avro
Issue Type: Sub-task
Components: php
Affects Versions: 1.13.0
Reporter: Ismaël Mejía
{{AvroIODatumReader::readArray()}} and {{readMap()}} in
{{lang/php/lib/Datum/AvroIODatumReader.php}} loop over the block count read
from input without any bound; the block size is read and ignored.
Add a configurable maximum collection length, validated per block and
cumulatively, and raise an appropriate {{AvroException}} when exceeded. Add a
corresponding test.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
