sungwy opened a new issue, #3979:
URL: https://github.com/apache/iceberg-python/issues/3979
`DeletionVector._deserialize_bitmap` reads an 8-byte count from the start of
the payload and uses it directly as a loop bound, appending to a list on each
iteration:
```python
number_of_bitmaps = int.from_bytes(pl[0:8], byteorder="little")
...
for _ in range(number_of_bitmaps):
...
bitmaps.append(bm)
```
Nothing checks the declared count against the actual payload length, so a
small blob can declare a large number of bitmaps.
---
Issue investigation generated via claude, reviewed by Sung, Kevin, Fokko.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
