You are viewing a plain text version of this content. The canonical link for it is here.
Posted to github@arrow.apache.org by "pitrou (via GitHub)" <gi...@apache.org> on 2025/10/13 16:50:10 UTC
[PR] GH-47803: [C++][Parquet] Fix read out of bounds on invalid RLE data [arrow]
pitrou opened a new pull request, #47804:
URL: https://github.com/apache/arrow/pull/47804
### Rationale for this change
Found by OSS-Fuzz, should fix https://issues.oss-fuzz.com/issues/451150486.
### What changes are included in this PR?
Ensure RLE run is within bounds before reading it.
### Are these changes tested?
Yes, by fuzz regression test in ASAN/UBSAN build.
### Are there any user-facing changes?
No.
**This PR contains a "Critical Fix".** (If the changes fix either (a) a security vulnerability, (b) a bug that caused incorrect or invalid data to be produced, or (c) a bug that causes a crash (even when the API contract is upheld), please provide explanation. If not, you can remove this.)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] GH-47803: [C++][Parquet] Fix read out of bounds on invalid RLE data [arrow]
Posted by "raulcd (via GitHub)" <gi...@apache.org>.
raulcd commented on PR #47804:
URL: https://github.com/apache/arrow/pull/47804#issuecomment-3400456820
I've cherry-picked this for 22.0.0.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] GH-47803: [C++][Parquet] Fix read out of bounds on invalid RLE data [arrow]
Posted by "pitrou (via GitHub)" <gi...@apache.org>.
pitrou merged PR #47804:
URL: https://github.com/apache/arrow/pull/47804
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] GH-47803: [C++][Parquet] Fix read out of bounds on invalid RLE data [arrow]
Posted by "pitrou (via GitHub)" <gi...@apache.org>.
pitrou commented on PR #47804:
URL: https://github.com/apache/arrow/pull/47804#issuecomment-3398275536
Should not merge this before the regression file is added to the arrow-testing repo.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] GH-47803: [C++][Parquet] Fix read out of bounds on invalid RLE data [arrow]
Posted by "conbench-apache-arrow[bot] (via GitHub)" <gi...@apache.org>.
conbench-apache-arrow[bot] commented on PR #47804:
URL: https://github.com/apache/arrow/pull/47804#issuecomment-3401655058
After merging your PR, Conbench analyzed the 3 benchmarking runs that have been run so far on merge-commit f83b301c17b3fbef6d320fcee2355336a163bd1a.
There were no benchmark performance regressions. 🎉
The [full Conbench report](https://github.com/apache/arrow/runs/52703943552) has more details. It also includes information about 40 possible false positives for unstable benchmarks that are known to sometimes produce them.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] GH-47803: [C++][Parquet] Fix read out of bounds on invalid RLE data [arrow]
Posted by "pitrou (via GitHub)" <gi...@apache.org>.
pitrou commented on PR #47804:
URL: https://github.com/apache/arrow/pull/47804#issuecomment-3400242312
Yes, I've tagged https://github.com/apache/arrow/issues/47803 for 22.0.0. I believe it is going to get cherry-picked automatically (@raulcd ).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org