avro: Bound and validate decoding against malformed input#36986

Merged

def- merged 8 commits into

MaterializeInc:mainfrom

Jun 15, 2026

Commits on Jun 11, 2026

avro: Cap per-block array/map length read from the wire

def-
and
claude
committed
avro: Bound schema-parse and value-decode recursion depth

def-
and
claude
committed
avro: Cap object-container block byte length via safe_len

def-
and
claude
committed
avro: Cap the object-container block object count read from the wire

def-
and
claude
committed
avro: Fix two schema-resolution panics on unmatched named types

def-
and
claude
committed
avro: Bound array/map block length by remaining input (OOM)

def-
and
claude
committed

Commits on Jun 15, 2026