Ismaël Mejía created AVRO-4329:
----------------------------------
Summary: [Java] Bound bytes/string allocation on non-seekable
streams
Key: AVRO-4329
URL: https://issues.apache.org/jira/browse/AVRO-4329
Project: Apache Avro
Issue Type: Sub-task
Components: java
Reporter: Ismaël Mejía
Assignee: Ismaël Mejía
Java SDK implementation of AVRO-4303.
When the number of bytes remaining is unknown (a non-seekable stream), read a
bytes/string value into a buffer that grows in bounded chunks rather than
allocating the full attacker-declared length up front, so a truncated or
hostile stream fails with a bounded EOFException instead of an
OutOfMemoryError. Applied to BinaryDecoder and DirectBinaryDecoder; the
existing single-allocation fast path is kept when the remaining byte count is
known.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
