dongjoon-hyun opened a new pull request, #59336: URL: https://github.com/apache/spark/pull/59336
### What changes were proposed in this pull request? This PR aims to upgrade `snappy-java` from 1.1.10.8 to 1.1.10.11. ### Why are the changes needed? To bring in the latest bug fixes and security hardening in the `snappy-java` 1.1.10.x line: - 1.1.10.9: fixes buffer overflows and unbounded allocations on untrusted input, adds input validation (oversized raw input, `maxCompressedLength` overflow), closes the underlying stream even if flush fails, fixes musl misdetection - 1.1.10.10: fixes a stream buffer released twice, a header recursion problem, and eager chunk allocation - 1.1.10.11: restores Hadoop ByteBuffer compression compatibility - https://github.com/xerial/snappy-java/releases/tag/v1.1.10.9 - https://github.com/xerial/snappy-java/releases/tag/v1.1.10.10 - https://github.com/xerial/snappy-java/releases/tag/v1.1.10.11 ### Does this PR introduce _any_ user-facing change? No behavior change is expected for valid input. Malformed Snappy input may now fail earlier with a clearer error. ### How was this patch tested? Pass the CIs. ### Was this patch authored or co-authored using generative AI tooling? Generated-by: Claude Sonnet 5.5 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
