Repository navigation
[C++][IPC] Negative sparse tensor shape and non_zero_length are not validated #50304
Description
Describe the enhancement requested
GetSparseTensorMetadata in cpp/src/arrow/ipc/metadata_internal.cc reads per-dimension TensorDim.size and the tensor's non_zero_length straight from an IPC SparseTensor flatbuffer message without any range check.
This can yield tensors with negative dimensions and defeats the buffer-size validation in the sparse index readers.
Component(s)
C++
Activity
[-][C++][IPC] Validate sparse tensor index attributes[/-][+][C++][IPC] Negative sparse tensor shape and non_zero_length are not validated[/+]apacheGH-50304: [C++][IPC] Reject negative sparse tensor shape and no…
apacheGH-50304: [C++][IPC] Reject negative sparse tensor shape and no…
apacheGH-50304: [C++][IPC] Reject negative sparse tensor shape and no…
apacheGH-50304: [C++][IPC] Reject negative sparse tensor shape and no…
GH-50304: [C++][IPC] Reject negative sparse tensor shape and non-zero…
rok commentedon Jun 30, 2026
Issue resolved by pull request 50305
#50305