fallintoplace opened a new pull request, #955: URL: https://github.com/apache/arrow-go/pull/955
### Rationale for this change Malformed IPC framing fields can currently reach allocations, FlatBuffer access, or mapped-file slicing before their ranges are validated. Refs #948 ### What changes are included in this PR? - Add configurable IPC metadata and body size limits, with a 64 MiB default metadata limit. - Reject invalid stream metadata and body lengths before allocation. - Validate file block offsets, sizes, checked arithmetic, and continuation-prefix space for regular and mapped readers. - Fix the upper-bound check in RecordBatchAt. ### Are these changes tested? Yes. The IPC package tests cover oversized and signed metadata prefixes, negative and overflowing block fields, out-of-file ranges, and valid block bounds. The package also passes its race test. ### Are there any user-facing changes? Malformed or over-limit IPC input now returns an error instead of reaching an allocation or panic. Callers that intentionally use unusually large metadata can override the limit with WithMetadataSizeLimit; WithBodySizeLimit is also available. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
