[
https://issues.apache.org/jira/browse/AVRO-4289?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ismaël Mejía reassigned AVRO-4289:
----------------------------------
Assignee: Ismaël Mejía
> [php] Enforce a maximum decompressed block size
> -----------------------------------------------
>
> Key: AVRO-4289
> URL: https://issues.apache.org/jira/browse/AVRO-4289
> Project: Apache Avro
> Issue Type: Sub-task
> Components: php
> Affects Versions: 1.11.5, 1.12.1
> Reporter: Ismaël Mejía
> Assignee: Ismaël Mejía
> Priority: Major
> Labels: pull-request-available
> Fix For: 1.12.2
>
> Time Spent: 1.5h
> Remaining Estimate: 0h
>
> {{AvroDataIOReader::data()}} in
> {{lang/php/lib/DataFile/AvroDataIOReader.php}} decompresses each block
> (deflate via {{gzinflate}}, plus zstandard/snappy/bzip2) with no bound on the
> output size.
> Enforce a configurable maximum decompressed size and fail decoding with a
> clear error when a block would exceed it. Add a test with a high-ratio block.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
