QuakeWang opened a new pull request, #8443:
URL: https://github.com/apache/paimon/pull/8443
### Purpose
`BlobDescriptor` and `BlobViewStruct` deserialization read fields directly
from the input buffer. Malformed descriptor/view bytes could therefore fail
with low-level exceptions such as `BufferUnderflowException` or
`NegativeArraySizeException`, and length fields were trusted before checking
that the remaining payload was complete.
This change adds narrow structural validation for malformed payloads:
- minimum payload length
- URI / identifier length fields
- complete offset/length and fieldId/rowId fields
The serialization format and normal deserialization behavior are unchanged.
### Tests
- `mvn -Dmaven.repo.local=/tmp/paimon-m2 -pl paimon-common
-Dtest=BlobDescriptorTest,BlobViewStructTest test`
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
