[AVRO-1237] Avro-C segfaults when union discriminant out of bounds

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.7.6
• Component/s: c

Environment

Avro-C 1.7.2
Ubuntu 12.04 x86_64

• Assignee: Unassigned
• Reporter: Michael Cooper
• Created: 01/Feb/13 05:36
• Updated: 11/Feb/14 04:54
• Resolved: 18/Dec/13 13:32

Description

libavro will segfault when decrypting a specially crafted (or corrupted) avro file when the discriminant is out of bounds.
There is already a check for < 0, but there is no upper bounds check.

I have attached a patch that checks the bounds.