arxhr007 opened a new pull request, #24069:
URL: https://github.com/apache/kafka/pull/24069

   ByteBufferAccessor.readArray() and readByteBuffer() only checked that the 
requested size did not exceed the bytes remaining, so a negative size fell 
through to new byte[size] (NegativeArraySizeException) or ByteBuffer.limit() 
(IllegalArgumentException) with no meaningful message. A negative tagged-field 
size in an otherwise well-formed request reaches this path because unsigned 
varints that overflow into the sign bit decode as negative values.
   
   Reject negative sizes with the same descriptive RuntimeException used for 
oversized reads.
   
   Generated-by: Devin (SWE-2 Max) <[email protected]>
   
   Delete this text and replace it with a detailed description of your change. 
The 
   PR title and body will become the squashed commit message.
   
   If you would like to tag individuals, add some commentary, upload images, or
   include other supplemental information that should not be part of the 
eventual
   commit message, please use a separate comment.
   
   If applicable, please include a summary of the testing strategy (including 
   rationale) for the proposed change. Unit and/or integration tests are 
expected
   for any behavior change and system tests should be considered for larger
   changes.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to