This is an automated email from the ASF dual-hosted git repository.
martin-g pushed a change to branch main
in repository https://gitbox.apache.org/repos/asf/avro-rs.git
from b077a56 chore(tests): Drop usage of better-panic crate in
apache_avro_test_helper (#638)
add 496a85d fix: Nested collections multiply the 512MB allocation budget
arbitrarily (#639)
add 03e3785 fix: Fixed-schema decode allocates attacker-chosen size with
no budget check (#640)
add a439ee7 fix: No recursion depth limit in decode_internal /
resolve_internal / serde deserializer (#642)
No new revisions were added by this update.
Summary of changes:
avro/src/decode.rs | 225 ++++++++++++++++++++++++++--
avro/src/error.rs | 5 +
avro/src/reader/block.rs | 4 +-
avro/src/reader/datum.rs | 12 +-
avro/src/reader/single_object.rs | 4 +-
avro/src/schema/mod.rs | 23 +++
avro/src/schema/parser.rs | 4 +-
avro/src/serde/deser_schema/mod.rs | 81 ++++++++--
avro/src/types.rs | 78 ++++++++--
avro/src/util.rs | 33 ++++
avro/tests/recursion_depth_deser.rs | 51 +++++++
avro/tests/recursion_depth_value_resolve.rs | 53 +++++++
12 files changed, 526 insertions(+), 47 deletions(-)
create mode 100644 avro/tests/recursion_depth_deser.rs
create mode 100644 avro/tests/recursion_depth_value_resolve.rs
