ksj1230 opened a new issue, #9904:
URL: https://github.com/apache/arrow-rs/issues/9904

   ## Description
   This issue was previously reported privately and is now being disclosed 
following coordination with maintainers.
   
   `repeat_slice_n_times()` computes repeated byte length using unchecked 
arithmetic.
   When the multiplication overflows, capacity checks may be bypassed, leading 
to insufficient allocation.
   
   This can result in a potential out-of-bounds write via safe Rust APIs.
   
   ## Fix
   See PR #9819
   
   Reported by Sungjin Kim (@ksj1230)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to