AVRO-4284: [c] Enforce a maximum decompressed block size#3853

Open

iemejia wants to merge 13 commits into

apache:mainfrom

iemejia:AVRO-4284-c-decompress-limit

Commits on Jul 12, 2026

AVRO-4284: [c] Clamp initial decode buffer to the decompression cap; check setenv
iemejia
committed

Commits on Jul 13, 2026

AVRO-4284: [c] Clamp AVRO_MAX_DECOMPRESS_LENGTH to INT64_MAX before narrowing
iemejia
committed
AVRO-4284: [c] Compare lzma decompressed size in size_t, not narrowed int64_t
iemejia
committed
AVRO-4284: [c] Clamp AVRO_MAX_DECOMPRESS_LENGTH on strtoll overflow
iemejia
committed
AVRO-4284: [c] Range-check compressed length before zlib avail_in
iemejia
committed
AVRO-4284: [c] Range-check compressed length before liblzma decode
iemejia
committed
AVRO-4284: [c] Reset (not end) the deflate stream on the over-limit path
iemejia
committed
AVRO-4284: [c] Only skip the codec test when the codec is not compiled in
iemejia
committed
AVRO-4284: [c] Range-check the snappy payload length before size_t conversion
iemejia
committed