arib06 opened a new pull request, #3891: URL: https://github.com/apache/avro/pull/3891
validate the fixed size in avro_schema_fixed_ns and reject negatives, otherwise a fixed type from untrusted schema json (e.g. size -2) reaches avro_generic_value_new as a near-SIZE_MAX instance size whose refcount allocation wraps to a couple of bytes and the refcount init writes past it (asan heap-buffer-overflow at generic.c:71); the c++ compiler already rejects size <= 0. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
