Ismaël Mejía created AVRO-4288:
----------------------------------
Summary: [perl] Enforce a maximum decompressed block size
Key: AVRO-4288
URL: https://issues.apache.org/jira/browse/AVRO-4288
Project: Apache Avro
Issue Type: Sub-task
Components: perl
Affects Versions: 1.13.0
Reporter: Ismaël Mejía
{{Avro::DataFileReader}} in {{lang/perl/lib/Avro/DataFileReader.pm}} reads the
whole block into memory and decompresses (deflate/bzip2/zstandard) with no
bound on the output. A {{block_max_size}} attribute exists with a TODO but is
never enforced.
Enforce a configurable maximum decompressed size and fail decoding with a clear
error when a block would exceed it. Add a test with a high-ratio block.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)