[jira] [Commented] (AVRO-1237) Avro-C segfaults when union discriminant out of bounds

["Michael Cooper (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/AVRO-1237?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13897536#comment-13897536 ] 

Michael Cooper commented on AVRO-1237:
--------------------------------------

This looks like it made it into 1.7.6 (CHANGELOG.txt), but the "Fix version" wasnt filled in.
So I have updated the "Fix version" field.

> Avro-C segfaults when union discriminant out of bounds
> ------------------------------------------------------
>
>                 Key: AVRO-1237
>                 URL: https://issues.apache.org/jira/browse/AVRO-1237
>             Project: Avro
>          Issue Type: Bug
>          Components: c
>         Environment: Avro-C 1.7.2
> Ubuntu 12.04 x86_64
>            Reporter: Michael Cooper
>             Fix For: 1.7.6
>
>         Attachments: 0001-AVRO-1237.-C-Verify-union-discriminant-when-reading-.patch, 0001-Check-union-discriminant-bounds-in-both-directions.patch, 0001-Test-case-for-AVRO-1237.patch, avro-1237-bad-union-discriminant.avro, avro-1237-good.avro
>
>
> libavro will segfault when decrypting a specially crafted (or corrupted) avro file when the discriminant is out of bounds.
> There is already a check for < 0, but there is no upper bounds check.
> I have attached a patch that checks the bounds.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)