Ismaël Mejía created AVRO-4288:
----------------------------------

             Summary: [perl] Enforce a maximum decompressed block size
                 Key: AVRO-4288
                 URL: https://issues.apache.org/jira/browse/AVRO-4288
             Project: Apache Avro
          Issue Type: Sub-task
          Components: perl
    Affects Versions: 1.13.0
            Reporter: Ismaël Mejía


{{Avro::DataFileReader}} in {{lang/perl/lib/Avro/DataFileReader.pm}} reads the 
whole block into memory and decompresses (deflate/bzip2/zstandard) with no 
bound on the output. A {{block_max_size}} attribute exists with a TODO but is 
never enforced.

Enforce a configurable maximum decompressed size and fail decoding with a clear 
error when a block would exceed it. Add a test with a high-ratio block.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to