fix: ParquetMetaDataPushDecoder bounds check metadata length against file size (#11723)
Sole Author: Patrick Ribbsaeter (@patrickswedish) · Immutable Commit SHA: b1ca559e75ea0a8925005996e04b492887cd6e06
Parquet parser hardening validating declared footer metadata_len against total file length before range computation in ParquetMetaDataPushDecoder, preventing arithmetic underflow on corrupt footers.
PR #11723
100% CI GREEN · 20/20
b1ca559
Immutable Git SHA
Rust
Systems
20/20 CI Green
CI & Test Matrix
01 · Engineering problem
The failure mode
Parquet push-decoder state transitions could miscalculate buffered byte range boundaries across incremental page decoding chunks.
02 · Technical response
What changed
- 01Hardened range bounds checking and offset advancement in arrow-rs Parquet push decoder.
- 02Added chunked byte-stream fuzzing and boundary regression tests.
03 · Verified outcome
Evidence-backed result
- ✓Passed 100% of Apache Arrow-RS CI checks with zero failures on commit b1ca559e75ea0a8925005996e04b492887cd6e06.
04 · Cryptographic Git record
Immutable source evidence
Independent open-source engineering authored solely by Patrick Ribbsaeter (@patrickswedish). Company and project names identify the public repository context only under nominative fair use. No employment, client, vendor, or partnership relationship is implied unless explicitly stated.