[
https://issues.apache.org/jira/browse/AVRO-4294?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ismaël Mejía reassigned AVRO-4294:
----------------------------------
Assignee: Ismaël Mejía
> [c++] Validate available bytes before allocating for length-prefixed values
> ---------------------------------------------------------------------------
>
> Key: AVRO-4294
> URL: https://issues.apache.org/jira/browse/AVRO-4294
> Project: Apache Avro
> Issue Type: Sub-task
> Components: c++
> Affects Versions: 1.11.5, 1.12.1
> Reporter: Ismaël Mejía
> Assignee: Ismaël Mejía
> Priority: Major
> Labels: pull-request-available
> Fix For: 1.13.0, 1.11.6, 1.12.2
>
> Time Spent: 1h 50m
> Remaining Estimate: 0h
>
> A bytes or string value is encoded as a length prefix followed by that many
> bytes of data. A malicious or truncated input can declare a very large length
> while carrying little or no actual data, causing a large buffer to be
> allocated before the shortfall is noticed. When the source can report how
> many bytes remain, reject a declared length that exceeds the bytes actually
> available before allocating for it. Companion to AVRO-4241 (Java).
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
