fallintoplace opened a new pull request, #955:
URL: https://github.com/apache/arrow-go/pull/955

   ### Rationale for this change
   
   Malformed IPC framing fields can currently reach allocations, FlatBuffer 
access, or mapped-file slicing before their ranges are validated.
   
   Refs #948
   
   ### What changes are included in this PR?
   
   - Add configurable IPC metadata and body size limits, with a 64 MiB default 
metadata limit.
   - Reject invalid stream metadata and body lengths before allocation.
   - Validate file block offsets, sizes, checked arithmetic, and 
continuation-prefix space for regular and mapped readers.
   - Fix the upper-bound check in RecordBatchAt.
   
   ### Are these changes tested?
   
   Yes. The IPC package tests cover oversized and signed metadata prefixes, 
negative and overflowing block fields, out-of-file ranges, and valid block 
bounds. The package also passes its race test.
   
   ### Are there any user-facing changes?
   
   Malformed or over-limit IPC input now returns an error instead of reaching 
an allocation or panic. Callers that intentionally use unusually large metadata 
can override the limit with WithMetadataSizeLimit; WithBodySizeLimit is also 
available.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to