AVRO-4295: [csharp] Bound allocation when decoding length-prefixed values and collections by iemejia · Pull Request #3860 · apache/avro

Commits on Jul 11, 2026

AVRO-4295: [csharp] Validate available bytes before allocating for length-prefixed values and collections
iemejia
committed
2210a46
AVRO-4295: [csharp] Reject negative lengths and out-of-range counts; harden min-bytes sum
iemejia
committed
04308d0
AVRO-4295: [csharp] Use long for collection min-bytes to avoid int overflow
iemejia
committed
7376905
AVRO-4295: [csharp] Reject bytes length above the max .NET array length
iemejia
committed
4232c99

Commits on Jul 12, 2026

AVRO-4295: [csharp] Clamp RemainingBytes; reject negative counts; deep null returns 0
iemejia
committed
601f0ab
AVRO-4295: [csharp] Cap zero-byte collection element allocation
iemejia
committed
d200b5f
AVRO-4295: [csharp] Reject long.MinValue array/map block count
iemejia
committed
99cefe0
AVRO-4295: [csharp] Cast bounded length to int; clamp structural cap
iemejia
committed
3671989
AVRO-4295: [csharp] Clarify two doc comments
iemejia
committed
1af6c0a
AVRO-4295: [csharp] Read string length as long to avoid int overflow
iemejia
committed
d308962
AVRO-4295: [csharp] Clamp structural cap to runtime max array length
iemejia
committed
cf8a687
AVRO-4295: [csharp] Grow array on demand instead of preallocating count
iemejia
committed
20fb487
AVRO-4295: [csharp] Explicitly bounds-check union and enum indices
iemejia
committed
6350b1e
AVRO-4295: [csharp] Reject overlong varints in ReadLong
iemejia
committed
91609bd
AVRO-4295: [csharp] Reject block-count overflow before adding to the total
iemejia
committed
345a803
AVRO-4295: [csharp] Clamp array growth to the structural cap
iemejia
committed
ffecc24
AVRO-4295: [csharp] Reject malformed 10-byte varints in ReadLong
iemejia
committed
8361138

Commits on Jul 13, 2026

Commits on Aug 6, 2026

AVRO-4295: [csharp] Bound zero-byte collection elements per datum, not per collection
iemejia
committed
ed310ad

Commits on Aug 7, 2026

Commits on Aug 22, 2026

AVRO-4295: [csharp] Bound the skip path too (reject negative/oversized skips)
iemejia
committed
824bc73

Commits on Aug 25, 2026

AVRO-4295: [csharp] Add PreresolvingDatumReader collection-bounds tests
iemejia
committed
331dc22

Navigation Menu

Uh oh!

AVRO-4295: [csharp] Bound allocation when decoding length-prefixed values and collections - #3860

AVRO-4295: [csharp] Bound allocation when decoding length-prefixed values and collections#3860
iemejia wants to merge 28 commits into
apache:mainfrom
iemejia:AVRO-4295-csharp-available-bytes

Commits on Jul 11, 2026

AVRO-4295: [csharp] Validate available bytes before allocating for length-prefixed values and collections

AVRO-4295: [csharp] Reject negative lengths and out-of-range counts; harden min-bytes sum

AVRO-4295: [csharp] Use long for collection min-bytes to avoid int overflow

AVRO-4295: [csharp] Reject bytes length above the max .NET array length

Commits on Jul 12, 2026

AVRO-4295: [csharp] Clamp RemainingBytes; reject negative counts; deep null returns 0

AVRO-4295: [csharp] Cap zero-byte collection element allocation

AVRO-4295: [csharp] Reject long.MinValue array/map block count

AVRO-4295: [csharp] Cast bounded length to int; clamp structural cap

AVRO-4295: [csharp] Clarify two doc comments

AVRO-4295: [csharp] Read string length as long to avoid int overflow

AVRO-4295: [csharp] Clamp structural cap to runtime max array length

AVRO-4295: [csharp] Grow array on demand instead of preallocating count

AVRO-4295: [csharp] Explicitly bounds-check union and enum indices

AVRO-4295: [csharp] Reject overlong varints in ReadLong

AVRO-4295: [csharp] Reject block-count overflow before adding to the total

AVRO-4295: [csharp] Clamp array growth to the structural cap

AVRO-4295: [csharp] Reject malformed 10-byte varints in ReadLong

Commits on Jul 13, 2026

AVRO-4295: [csharp] Compute prealloc in long; clarify structural-cap message

AVRO-4295: [csharp] Isolate collection tests from AVRO_MAX_COLLECTION_ITEMS

AVRO-4295: [csharp] Revert ineffective env [SetUp]; document static caps

AVRO-4295: [csharp] Bound huge-count reject tests to just over the item cap

Commits on Aug 6, 2026

AVRO-4295: [csharp] Bound zero-byte collection elements per datum, not per collection

Commits on Aug 7, 2026

AVRO-4295: [csharp] Apply collection allocation caps to all readers

AVRO-4295: [csharp] Fix stale test comments flagged by review

AVRO-4295: [csharp] Grow decoded array by the current chunk, not the prealloc bound

AVRO-4295: [csharp] Drop generic catch in concurrency test (CodeQL)

Commits on Aug 22, 2026

AVRO-4295: [csharp] Bound the skip path too (reject negative/oversized skips)

Commits on Aug 25, 2026

AVRO-4295: [csharp] Add PreresolvingDatumReader collection-bounds tests