[IMPALA-3923] BufferedTupleStream::GetRows() can overflow 32-bit int

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: Impala 2.7.0
• Fix Version/s: Impala 2.7.0
• Component/s: Backend
• Labels: crash
• Target Version: Impala 2.7.0
• Assignee: Tim Armstrong
• Reporter: Tim Armstrong
• Created: 27/Jul/16 20:48
• Updated: 11/Aug/16 17:20
• Resolved: 11/Aug/16 17:20

Description

GetRows() tries to read an entire stream into a RowBatch. The stream num_rows is a 64-bit int but the RowBatch num_rows is a 32-bit int. If GetRows() is called with num_rows > INT_MAX the likely result is a crash

The GetRows() API has other flaws (IMPALA-2758) but it would be good to avoid this particular crash.