[
https://issues.apache.org/jira/browse/AVRO-4288?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
ASF GitHub Bot updated AVRO-4288:
---------------------------------
Labels: pull-request-available (was: )
> [perl] Enforce a maximum decompressed block size
> ------------------------------------------------
>
> Key: AVRO-4288
> URL: https://issues.apache.org/jira/browse/AVRO-4288
> Project: Apache Avro
> Issue Type: Sub-task
> Components: perl
> Affects Versions: 1.11.5, 1.12.1
> Reporter: Ismaël Mejía
> Priority: Major
> Labels: pull-request-available
> Fix For: 1.12.2
>
> Time Spent: 10m
> Remaining Estimate: 0h
>
> {{Avro::DataFileReader}} in {{lang/perl/lib/Avro/DataFileReader.pm}} reads
> the whole block into memory and decompresses (deflate/bzip2/zstandard) with
> no bound on the output. A {{block_max_size}} attribute exists with a TODO but
> is never enforced.
> Enforce a configurable maximum decompressed size and fail decoding with a
> clear error when a block would exceed it. Add a test with a high-ratio block.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
