Ismaël Mejía created AVRO-4327:
----------------------------------

             Summary: [Java] Bound decode recursion depth
                 Key: AVRO-4327
                 URL: https://issues.apache.org/jira/browse/AVRO-4327
             Project: Apache Avro
          Issue Type: Sub-task
          Components: java
            Reporter: Ismaël Mejía
            Assignee: Ismaël Mejía


Java SDK implementation of AVRO-4302.

Add a configurable maximum decode nesting depth enforced by counting structural 
descents into records, arrays, maps and unions, rejecting input that nests 
deeper than the limit with a bounded SystemLimitException instead of a 
StackOverflowError. Default 100 (matching Protocol Buffers), configurable via 
the org.apache.avro.limits.decode.maxDepth system property. Guards both the 
classic GenericDatumReader (and its Specific/Reflect subclasses) and the 
FastReaderBuilder record/map/union/array readers.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to