Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[CI][C++] Potential integer overflow in PoolBuffer #43885

Closed
pitrou opened this issue Aug 29, 2024 · 1 comment
Closed

[CI][C++] Potential integer overflow in PoolBuffer #43885

pitrou opened this issue Aug 29, 2024 · 1 comment
Assignees
@pitrou
Labels
Component: C++ Component: Continuous Integration Type: bug
Milestone
18.0.0

Comments

@pitrou
Copy link
Member

pitrou commented Aug 29, 2024

Describe the bug, including details regarding any error messages, version, and platform.

There is a potential integer overflow in PoolBuffer::Resize and PoolBuffer::Reserve when rounding up the desired capacity to a multiple of 64.

This was found by OSS-Fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71200

Component(s)

C++, Continuous Integration
pitrou added a commit to pitrou/arrow that referenced this issue Aug 29, 2024
@pitrou
apacheGH-43885: [C++][CI] Catch potential integer overflow in PoolBuffer
5160feb 
This should fix https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71200
@github-actions github-actions bot mentioned this issue Aug 29, 2024
Merged
@pitrou pitrou mentioned this issue Aug 29, 2024
Merged
pitrou added a commit to apache/arrow-testing that referenced this issue Aug 29, 2024
@pitrou
Add IPC fuzz regression file (#101)
4d20949 
Add fuzz regression file for
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71200

The fix is tracked in apache/arrow#43885
pitrou added a commit that referenced this issue Aug 29, 2024
@pitrou
GH-43885: [C++][CI] Catch potential integer overflow in PoolBuffer (#…
6b24253 
…43886)

This should fix https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71200

* GitHub Issue: #43885

Lead-authored-by: Antoine Pitrou <[email protected]>
Co-authored-by: Antoine Pitrou <[email protected]>
Signed-off-by: Antoine Pitrou <[email protected]>
@pitrou
Copy link
Member Author

pitrou commented Aug 29, 2024

Issue resolved by pull request 43886
#43886

@pitrou pitrou added this to the 18.0.0 milestone Aug 29, 2024
@pitrou pitrou closed this as completed Aug 29, 2024
mapleFU pushed a commit to mapleFU/arrow that referenced this issue Sep 3, 2024
@pitrou @mapleFU
apacheGH-43885: [C++][CI] Catch potential integer overflow in PoolBuf…
e627c81 
…fer (apache#43886)

This should fix https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71200

* GitHub Issue: apache#43885

Lead-authored-by: Antoine Pitrou <[email protected]>
Co-authored-by: Antoine Pitrou <[email protected]>
Signed-off-by: Antoine Pitrou <[email protected]>
zanmato1984 pushed a commit to zanmato1984/arrow that referenced this issue Sep 6, 2024
@pitrou @zanmato1984
apacheGH-43885: [C++][CI] Catch potential integer overflow in PoolBuf…
da37fc7 
…fer (apache#43886)

This should fix https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71200

* GitHub Issue: apache#43885

Lead-authored-by: Antoine Pitrou <[email protected]>
Co-authored-by: Antoine Pitrou <[email protected]>
Signed-off-by: Antoine Pitrou <[email protected]>
khwilson pushed a commit to khwilson/arrow that referenced this issue Sep 14, 2024
@pitrou @khwilson
apacheGH-43885: [C++][CI] Catch potential integer overflow in PoolBuf…
3446117 
…fer (apache#43886)

This should fix https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71200

* GitHub Issue: apache#43885

Lead-authored-by: Antoine Pitrou <[email protected]>
Co-authored-by: Antoine Pitrou <[email protected]>
Signed-off-by: Antoine Pitrou <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@pitrou pitrou

Labels
Component: C++ Component: Continuous Integration Type: bug
Projects
None yet
Milestone
18.0.0
Development

No branches or pull requests
1 participant
@pitrou