Ismaël Mejía created AVRO-4289:
----------------------------------

             Summary: [php] Enforce a maximum decompressed block size
                 Key: AVRO-4289
                 URL: https://issues.apache.org/jira/browse/AVRO-4289
             Project: Apache Avro
          Issue Type: Sub-task
          Components: php
    Affects Versions: 1.13.0
            Reporter: Ismaël Mejía


{{AvroDataIOReader::data()}} in {{lang/php/lib/DataFile/AvroDataIOReader.php}} 
decompresses each block (deflate via {{gzinflate}}, plus 
zstandard/snappy/bzip2) with no bound on the output size.

Enforce a configurable maximum decompressed size and fail decoding with a clear 
error when a block would exceed it. Add a test with a high-ratio block.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to