You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@orc.apache.org by "Norbert Luksa (Jira)" <ji...@apache.org> on 2020/02/27 14:49:00 UTC

[jira] [Created] (ORC-605) Possible overflow in StringDictionaryColumnReader

Norbert Luksa created ORC-605:
---------------------------------

             Summary: Possible overflow in StringDictionaryColumnReader
                 Key: ORC-605
                 URL: https://issues.apache.org/jira/browse/ORC-605
             Project: ORC
          Issue Type: Bug
          Components: C++
            Reporter: Norbert Luksa
            Assignee: Norbert Luksa


In the constructor of StringDictionaryColumnReader, [this line|https://github.com/apache/orc/blob/f349dc65af43911f8b839d25bacbd39bcc3dddd9/c%2B%2B/src/ColumnReader.cc#L590]
{code:c++}
lengthArray[i] += lengthArray[i - 1];
{code}
can overflow in case of a corrupt huge length value.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)