Skip to content

[C++][Gandiva] Some string functions may be overflowed #49753

Closed

Description

@kou

Describe the bug, including details regarding any error messages, version, and platform.

Related issue: #49159

See also: https://huntr.com/bounties/12ee8dbe-0ac7-4724-9fd9-d4f203b36c62

We need to review all string functions.

Component(s)

C++, Gandiva

Activity

  1. kou commented on Apr 15, 2026

    @kou
    MemberAuthor
  2. dmitry-chirkov-dremio commented on Apr 17, 2026

    @dmitry-chirkov-dremio
    Contributor

    @kou I'm tracking few issues internally for Dremio that I'd like to get to (eventually) so yeas, this would fit.

    Examples:

    I can't commit myself or the team right this moment to this however huntr report looks very actionable for myself being bored one of these weekends.

    Anything else on your list that caught your eye?

  3. kou commented on Apr 18, 2026

    @kou
    MemberAuthor

    Thanks. There are only 2 active reports (that aren't fixed yet) for Gandiva (this and #49752) and they are already rejected. They are just normal bugs not security vulnerabilities.

  4. abtom87 commented on Apr 19, 2026

    @abtom87
    Contributor

    @kou Is this already taken or could i have a look at this bug?

  5. kou commented on Apr 19, 2026

    @kou
    MemberAuthor

    You can have a look at this bug.

  6. abtom87 commented on Apr 19, 2026

    @abtom87
    Contributor

    take

  7. added 5 commits that reference this issue on Apr 20, 2026
  8. 27 remaining items

  9. added 4 commits that reference this issue on May 19, 2026
  10. added 7 commits that reference this issue on Jun 15, 2026
  11. added a commit that references this issue on Jun 17, 2026
  12. added this to the 25.0.0 milestone on Jun 17, 2026
  13. kou commented on Jun 17, 2026

    @kou
    MemberAuthor

    Issue resolved by pull request 49813
    #49813

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions