KHARSHAVARDHAN-eng commented on issue #10921:
URL: https://github.com/apache/arrow-rs/issues/10921#issuecomment-5482991949

   @Tembocs , Thanks for the detailed report and the reproducible example. I’m 
interested in investigating this issue and working on a fix.
   
   From the description, it looks like the reader trusts the declared 
block/message body length before confirming that the data is actually 
available, which can lead to an excessively large allocation for malformed 
input. I’d like to investigate both the file IPC path and the stream/message 
reader path mentioned in the report, and add regression tests to ensure 
malformed length values return an appropriate ArrowError rather than causing an 
allocation failure or process abort.
   
   If no one is already working on this, would it be okay for me to take it up?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to