paleolimbot opened a new pull request, #174:
URL: https://github.com/apache/arrow-nanoarrow/pull/174

   This is required for IPC reading because corrupted offset and/or union type 
ID buffers could result in consumers accessing out-of-bounds elements. 
`ArrowArrayViewSetArray()` already checked the *last* element of offset buffers 
against lengths but didn't check the first element and didn't check for 
negative sequential offsets.
   
   TODO: Unions 🔥 🔥 🔥 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to