metsw24-max opened a new pull request, #50076:
URL: https://github.com/apache/arrow/pull/50076

   to_hex_int64/to_hex_int32 in string_ops.cc allocate the arena buffer with 
the bare hex-digit count (16 and 8) but pass that size + 1 to snprintf. A 
full-width value such as to_hex(-1::bigint) writes 16 digits plus a NUL, one 
byte past the allocation, corrupting the next arena allocation since 
gdv_fn_context_arena_malloc returns exactly the requested bytes. Allocate the 
extra byte, same as the GH-49752 fix in hash_utils.cc.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to