[AVRO-3049] Java: BinaryDecoder lacks checks on bytes array length

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.11.0, 1.10.2
• Component/s: java
• Assignee: John Karp
• Reporter: John Karp
• Created: 20/Feb/21 01:56
• Updated: 03/Mar/21 00:45
• Resolved: 24/Feb/21 15:12

Description

There are several checks on string length in BinaryDecoder. However, it lacks the same checks for byte arrays.

• Negative lengths lead to IllegalArgumentException instead of org.apache.avro.AvroRuntimeException
• Pathologically large (however legal) arrays can be allocated. Some applications will be suffer denial of service if they are forced to allocate 1 GB arrays repeatedly.

Issue Links

• relates to: AVRO-2179 Malformed data, the BinaryDecoder allocates large arrays