PG1204 opened a new issue, #7200:
URL: https://github.com/apache/texera/issues/7200

   ### What happened?
   
   `_read_binary_value`'s fallback calls `base64.b64decode(val)` without 
`validate=True`. Since `b64decode` ignores non-alphabet characters by default, 
many ordinary strings "successfully" decode into garbage bytes, so the intended 
UTF-8 fallback rarely fires, a plain-text column value can be turned into 
garbage and sent as image/audio bytes.
   
   File: `.../huggingFace/codegen/HuggingFaceCodegenBase.scala` 
(`_read_binary_value`). Fix: pass `validate=True` and catch `binascii.Error` so 
only genuine base64 decodes.
   
   
   ### How to reproduce?
   
   Put a non-data-URL, non-base64 string in an image/audio column → it's 
decoded to garbage bytes instead of being treated as text.
   
   ### Version/Branch
   
   1.3.0-incubating-SNAPSHOT (main)
   
   ### Commit Hash (Optional)
   
   _No response_
   
   ### What browsers are you seeing the problem on?
   
   _No response_
   
   ### Relevant log output
   
   ```shell
   
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to