You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@avro.apache.org by "Doug Cutting (JIRA)" <ji...@apache.org> on 2013/02/07 18:33:13 UTC

[jira] [Commented] (AVRO-1237) Avro-C segfaults when union discriminant out of bounds

    [ https://issues.apache.org/jira/browse/AVRO-1237?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13573693#comment-13573693 ] 

Doug Cutting commented on AVRO-1237:
------------------------------------

Can someone familiar with Avro C please review this?

Also, is it possible to add a test case for this?
                
> Avro-C segfaults when union discriminant out of bounds
> ------------------------------------------------------
>
>                 Key: AVRO-1237
>                 URL: https://issues.apache.org/jira/browse/AVRO-1237
>             Project: Avro
>          Issue Type: Bug
>          Components: c
>         Environment: Avro-C 1.7.2
> Ubuntu 12.04 x86_64
>            Reporter: Michael Cooper
>         Attachments: 0001-Check-union-discriminant-bounds-in-both-directions.patch
>
>
> libavro will segfault when decrypting a specially crafted (or corrupted) avro file when the discriminant is out of bounds.
> There is already a check for < 0, but there is no upper bounds check.
> I have attached a patch that checks the bounds.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira