jaideeppyne opened a new pull request, #11136:
URL: https://github.com/apache/arrow-rs/pull/11136

   Closes #11121.
   
   BYTE_STREAM_SPLIT previously used the page header count as its decode bound 
while deriving stream stride from the encoded bytes. A malformed header could 
therefore drive `join_streams_const` past the end of the buffer.
   
   This change derives the decoder value count from complete encoded values, 
rejects partial values and encoded counts larger than the declared page count, 
and leaves declared counts that include Parquet v1 nulls valid. Higher-level 
readers now return their existing insufficient-values error for truncated 
required pages instead of panicking.
   
   Tests cover the reported declared-count mismatch, partial values, and 
impossible oversized buffers.
   
   Validation:
   - `cargo test -p parquet --lib`
   - `cargo clippy -p parquet --lib --all-features -- -D warnings`
   - `cargo +stable fmt --all -- --check`
   - `git diff --check`


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to