Skip to content

ORC-2193: Parse encrypted FileStatistics via createCodedInputStream#2674

Closed
dongjoon-hyun wants to merge 1 commit into
apache:mainfrom
dongjoon-hyun:ORC-2193
Closed

ORC-2193: Parse encrypted FileStatistics via createCodedInputStream#2674
dongjoon-hyun wants to merge 1 commit into
apache:mainfrom
dongjoon-hyun:ORC-2193

Conversation

@dongjoon-hyun

@dongjoon-hyun dongjoon-hyun commented Jul 7, 2026

Copy link
Copy Markdown
Member

What changes were proposed in this pull request?

This PR makes the encrypted FileStatistics parsing path in the Java reader consistent with all other protobuf parse paths by wrapping it with InStream.createCodedInputStream(...).

Why are the changes needed?

Every other protobuf parse path in the reader (footer, metadata, stripe footer, row index, bloom filter, columnar stripe stats) goes through createCodedInputStream, which applies setSizeLimit(1 GB). This was the only exception, so this aligns it for consistency. It is not a security fix: the input is an already-bounded in-memory sub-message from the footer.

How was this patch tested?

Pass the CIs.

Was this patch authored or co-authored using generative AI tooling?

Generated-by: Claude Fable 5

dongjoon-hyun added a commit that referenced this pull request Jul 7, 2026
### What changes were proposed in this pull request?

This PR makes the encrypted `FileStatistics` parsing path in the Java reader consistent with all other protobuf parse paths by wrapping it with `InStream.createCodedInputStream(...)`.

### Why are the changes needed?

Every other protobuf parse path in the reader (footer, metadata, stripe footer, row index, bloom filter, columnar stripe stats) goes through `createCodedInputStream`, which applies `setSizeLimit(1 GB)`. This was the only exception, so this aligns it for consistency. It is not a security fix: the input is an already-bounded in-memory sub-message from the footer.

### How was this patch tested?

Pass the CIs.

### Was this patch authored or co-authored using generative AI tooling?

Generated-by: Claude Fable 5

Closes #2674 from dongjoon-hyun/ORC-2193.

Authored-by: Dongjoon Hyun <dongjoon@apache.org>
Signed-off-by: Dongjoon Hyun <dongjoon@apache.org>
(cherry picked from commit 1ce1786)
Signed-off-by: Dongjoon Hyun <dongjoon@apache.org>
@dongjoon-hyun dongjoon-hyun added this to the 2.3.1 milestone Jul 7, 2026
@dongjoon-hyun dongjoon-hyun deleted the ORC-2193 branch July 7, 2026 20:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant