[
https://issues.apache.org/jira/browse/ARROW-16225?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17527887#comment-17527887
]
Gidon Gershinsky commented on ARROW-16225:
------------------------------------------
_not security-critical. It's just a way of avoiding filename collisions._
Agreed. This does not affect data encryption and doesn't leak sensitive data.
The unique file names are a preparation for a future capability (e2e data
integrity protection), which is currently a WIP anyway.
> [c++][parquet] encryption code bug?
> -----------------------------------
>
> Key: ARROW-16225
> URL: https://issues.apache.org/jira/browse/ARROW-16225
> Project: Apache Arrow
> Issue Type: Bug
> Components: C++, Parquet
> Reporter: zhengle
> Assignee: Maya Anderson
> Priority: Major
> Labels: pull-request-available
> Fix For: 8.0.0
>
> Time Spent: 1h 20m
> Remaining Estimate: 0h
>
> File: cpp\src\parquet\encryption\encryption.cc
> Line: 393
> {code:cpp}
> encryption::RandBytes(aad_file_unique, sizeof(kAadFileUniqueLength));
> {code}
> *sizeof* seems unnecessary here?
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
