You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@avro.apache.org by "ASF GitHub Bot (JIRA)" <ji...@apache.org> on 2018/11/08 18:08:00 UTC

[jira] [Commented] (AVRO-2179) Malformed data, the BinaryDecoder allocates large arrays

    [ https://issues.apache.org/jira/browse/AVRO-2179?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16680118#comment-16680118 ] 

ASF GitHub Bot commented on AVRO-2179:
--------------------------------------

dkulp commented on issue #311: AVRO-2179: Malformed data, the BinaryDecoder allocates large arrays
URL: https://github.com/apache/avro/pull/311#issuecomment-437099326
 
 
   This is definitely invalid.   If the stream is coming via http or something, the input buffer may be relatively small and definitely may not contain the entire string.  

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


> Malformed data, the BinaryDecoder allocates large arrays
> --------------------------------------------------------
>
>                 Key: AVRO-2179
>                 URL: https://issues.apache.org/jira/browse/AVRO-2179
>             Project: Apache Avro
>          Issue Type: Bug
>          Components: java
>    Affects Versions: 1.8.2
>            Reporter: Jonny
>            Priority: Critical
>         Attachments: image2018-5-10_11-7-40.png, image2018-5-11_21-27-56.png
>
>
> Recentlly I use avro find it has this problem:The memory suddenly explode and trigger the fullgc, So I dump the memory file. And then I use jvisualvm tool to analysis I found a org.apache.avro.util.Utf8 object and the bytes array length was over 1610470037.
> The method of readInt() shouldn't over limit, So I think it should be restricted.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)