[I] Avro decompression codecs apply no output size limit [iceberg-python]

["sungwy (via GitHub)" <gi...@apache.org>]

sungwy opened a new issue, #3980:
URL: https://github.com/apache/iceberg-python/issues/3980

   The codecs in `pyiceberg/avro/codecs/` decompress without bounding the output — e.g. `bz2.decompress(data)` in `bzip2.py`, and the same shape in the deflate and zstd paths.
   
   The compressed input determines the decompressed size, and no cap or expansion-ratio check is applied.
   
   
   ---
   Issue investigation generated via claude, reviewed by Sung, Kevin, Fokko.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org