[ARROW-11470] [C++] Overflow occurs on integer multiplications in ComputeRowMajorStrides, ComputeColumnMajorStrides, and CheckTensorStridesValidity

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 4.0.0
• Component/s: C++
• Labels: pull-request-available
• External issue URL: https://github.com/apache/arrow/issues/27354
• Assignee: Kenta Murata
• Reporter: Kenta Murata
• Created: 02/Feb/21 09:32
• Updated: 11/Jan/23 08:19
• Resolved: 18/Feb/21 11:31

Description

OSS-Fuzz reports the integer multiplication in ComputeRowMajorStrides function occurs overflow.

https://oss-fuzz.com/testcase-detail/6232257264222208

The same issue exists in ComputeColumnMajorStrides.

Moreover the similar overflow issue is occurred in CalculateValueOffset function called from CheckTensorStridesValidity function.

https://oss-fuzz.com/testcase-detail/6583463383793664

Issue Links

• links to: GitHub Pull Request #55
• links to: GitHub Pull Request #9395