felipecrv commented on issue #7136: URL: https://github.com/apache/arrow-rs/issues/7136#issuecomment-6634476778
> I think the idea is if you need to read data from a source that produces unaligned buffers you should use the align_buffers method (and/or fix the producer) Fixing the producer is not enough, because you should not trust producers. They might be attackers. The current panic on unaligned buffers gives us security: we don't trust the producer. Denial-of-service still possible because a panic can crash a process. We are safe but not robust. The consumer could align (alloc needed) instead of panic'ing. That still means we should fix producers to avoid the allocation on the consumer side. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
