fallintoplace opened a new pull request, #1031:
URL: https://github.com/apache/arrow-go/pull/1031

   ### Rationale for this change
   
   The plain Boolean decoder trusted the declared value count without checking 
that the encoded payload contained enough bits. A truncated page could 
therefore panic during `Decode` or `Discard` when the decoder indexed beyond 
the input buffer.
   
   ### What changes are included in this PR?
   
   * Reject negative Boolean value counts.
   * Reject payloads shorter than the declared number of Boolean values.
   * Return a descriptive error from `SetData` before decoder state is updated.
   
   ### Are these changes tested?
   
   Yes. The regression test covers a nine-value declaration backed by only one 
byte, along with a negative value count. The full `parquet/internal/encoding` 
package passes.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to