You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@avro.apache.org by "Michael Cooper (JIRA)" <ji...@apache.org> on 2013/02/01 06:37:12 UTC

[jira] [Created] (AVRO-1237) Avro-C segfaults when union discriminant out of bounds

Michael Cooper created AVRO-1237:
------------------------------------

             Summary: Avro-C segfaults when union discriminant out of bounds
                 Key: AVRO-1237
                 URL: https://issues.apache.org/jira/browse/AVRO-1237
             Project: Avro
          Issue Type: Bug
          Components: c
         Environment: Avro-C 1.7.2
Ubuntu 12.04 x86_64
            Reporter: Michael Cooper


libavro will segfault when decrypting a specially crafted (or corrupted) avro file when the discriminant is out of bounds.
There is already a check for < 0, but there is no upper bounds check.

I have attached a patch that checks the bounds.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira