metsw24-max opened a new pull request, #50070:
URL: https://github.com/apache/arrow/pull/50070

   ReadSparseCSFIndex (and GetSparseCSFIndexMetadata) size their vectors from 
ndim but iterate the unchecked flatbuffer buffer counts, so a CSF sparse tensor 
message with mismatched counts reads/writes past those vectors. The payload 
path already guards this via CheckSparseTensorBodyBufferCount; the file/stream 
path did not.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to