[jira] [Created] (AVRO-4280) [perl] Bound collection size when decoding arrays and maps

["Ismaël Mejía (Jira)" <ji...@apache.org>]

Ismaël Mejía created AVRO-4280:
----------------------------------

             Summary: [perl] Bound collection size when decoding arrays and maps
                 Key: AVRO-4280
                 URL: https://issues.apache.org/jira/browse/AVRO-4280
             Project: Apache Avro
          Issue Type: Sub-task
          Components: perl
    Affects Versions: 1.13.0
            Reporter: Ismaël Mejía


{{decode_array()}} and {{decode_map()}} in {{lang/perl/lib/Avro/BinaryDecoder.pm}} iterate {{for (1..$block_count)}} using the block count read from input; the block size for negative blocks is read but discarded, and no limit is applied.

Add a configurable maximum collection length, validated per block and cumulatively, and fail decoding with a clear error when exceeded. Add a corresponding test.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)