pitrou opened a new pull request, #48901: URL: https://github.com/apache/arrow/pull/48901
**Do not merge before https://github.com/apache/arrow-testing/pull/125 is merged and the testing submodule is updated** ### Rationale for this change An incorrect variadic buffer count could easily blow up memory when reserving a vector of Buffers, even though the RecordBatch has a lot less buffers available. Reported by OSS-Fuzz at https://issues.oss-fuzz.com/issues/476180608, and separately to the Arrow PMC. ### What changes are included in this PR? Pre-validate the variadic buffer count read from the IPC RecordBatch table. ### Are these changes tested? Yes, by additional fuzz regression file. ### Are there any user-facing changes? No. **This PR contains a "Critical Fix".** (If the changes fix either (a) a security vulnerability, (b) a bug that caused incorrect or invalid data to be produced, or (c) a bug that causes a crash (even when the API contract is upheld), please provide explanation. If not, you can remove this.) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
