KHARSHAVARDHAN-eng opened a new pull request, #50733: URL: https://github.com/apache/arrow/pull/50733
### What changes are included? Fix out-of-bounds reads in Gandiva UTF-8 masking functions by passing the remaining buffer length to `utf8proc_iterate()` instead of the original string length after advancing the input pointer. Also adds missing error handling for invalid UTF-8 sequences and regression tests covering truncated multi-byte UTF-8 inputs. ### Why are these changes needed? The previous implementation advanced the input pointer while continuing to pass the original buffer length to `utf8proc_iterate()`. This could allow reads beyond the remaining valid buffer. ### Tests - Added regression tests for truncated 2-byte, 3-byte, and 4-byte UTF-8 sequences. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
