Stephen0421 opened a new pull request, #9223:
URL: https://github.com/apache/paimon/pull/9223

   ### Purpose
   
   Harden BLOB file metadata parsing against corrupt or truncated footer and 
index data.
   
   This change:
   
   - Validates the minimum footer size and index boundaries before seeking or 
allocating memory.
   - Rejects malformed compressed indexes with a descriptive `IOException`.
   - Validates record-length sentinels, minimum record length, and the total 
indexed data size.
   - Validates selection cardinality and selected record positions.
   - Preserves the existing lazy payload-reading behavior.
   
   ### Test
   
   - Added `BlobFileMetaTest` covering:
     - Truncated files.
     - Invalid index lengths and malformed indexes.
     - Unsupported versions.
     - Invalid record lengths and mismatched data-region sizes.
     - NULL and placeholder sentinels.
     - Empty, non-contiguous, and out-of-range selections.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to