pitrou opened a new issue, #55476: URL: https://github.com/apache/arrow/issues/55476
### Describe the bug, including details regarding any error messages, version, and platform. In the IPC reader, when a subset of column is asked for, we currently allocate an entire buffer with the same size as the body size advertised in the IPC message: https://github.com/apache/arrow/blob/16900e3b0f3867f0fefe0e70e769516644d07902/cpp/src/arrow/ipc/message.cc#L364-L371 Unfortunately, this can be an unbounded allocation if the advertised body size in the IPC message exceeds the file size. This opens the door to denial of service attacks. Furthermore, the allocation uses the default memory pool instead of a user-configured memory pool. ### Component(s) C++ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
