orbisai0security commented on PR #887: URL: https://github.com/apache/arrow-nanoarrow/pull/887#issuecomment-4490128628
Thanks, agreed. I overstated the memory-safety impact here. Given the actual context, these are fixed-format values written into 256-byte local buffers, so I agree this is not a practical memory-safety issue in arrow-nanoarrow. I’ll reframe this as a low-risk cleanup / defensive hygiene change rather than a vulnerability. Since this is vendored FlatCC code, I’ll also file the same cleanup upstream with FlatCC so the change can flow from the source project. I’ll update the PR title/description accordingly. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
