pitrou opened a new issue, #49896:
URL: https://github.com/apache/arrow/issues/49896

   ### Describe the bug, including details regarding any error messages, 
version, and platform.
   
   IO methods like `ReadAt` can return less bytes than asked for if the file is 
too short, but the IPC reader doesn't always detect for this situation. On 
invalid IPC files, this can produce issues down the road such as 
half-initialized buffers and large processing times (with a potential denial of 
service).
   
   This issue was detected by OSS-Fuzz: 
https://issues.oss-fuzz.com/issues/489758017
   
   ### Component(s)
   
   C++


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to