[ARROW-6270] [C++][Fuzzing] IPC reads do not check buffer indices

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.15.0
• Component/s: C++
• Labels: fuzzer pull-request-available
• External issue URL: https://github.com/apache/arrow/issues/22654
• Assignee: Marco Neumann
• Reporter: Marco Neumann
• Created: 16/Aug/19 11:57
• Updated: 11/Jan/23 07:46
• Resolved: 17/Aug/19 20:27

Description

The attached crash was found by arrow-ipc-fuzzing-test and indicates that the IPC reader is not checking the flatbuffer encoded buffers for length and can produce out-of-bounds-reads.

Issue Links

• links to: GitHub Pull Request #5105