Skip to content

fix(blob): validate entry integrity on reads#582

Merged
JingsongLi merged 1 commit into
apache:mainfrom
QuakeWang:fix/blob-integrity
Jul 22, 2026
Merged

fix(blob): validate entry integrity on reads#582
JingsongLi merged 1 commit into
apache:mainfrom
QuakeWang:fix/blob-integrity

Conversation

@QuakeWang

Copy link
Copy Markdown
Member

Purpose

BLOB entries contain a magic number, embedded length, and CRC32, but inline reads previously fetched only payload bytes. Corrupted entries could therefore be returned as valid data.

Brief change log

  • Validate entry magic, length, and CRC32 for scalar and inline ARRAY<BLOB> reads.
  • Reject short or corrupted entries, including empty BLOB values.
  • Preserve descriptor-mode range-only behavior and add corruption regression tests.

Tests

  • cargo fmt --all -- --check
  • cargo clippy --locked --all-targets --workspace --features fulltext,vortex -- -D warnings
  • cargo test --locked -p paimon --all-targets --features fulltext,vortex

API and Format

Documentation

Signed-off-by: QuakeWang <wangfuzheng0814@foxmail.com>

@JingsongLi JingsongLi left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1

@JingsongLi
JingsongLi merged commit 308d5b0 into apache:main Jul 22, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants