Skip to content

[C++][IPC] Negative sparse tensor shape and non_zero_length are not validated #50304

Description

@rok

Describe the enhancement requested

GetSparseTensorMetadata in cpp/src/arrow/ipc/metadata_internal.cc reads per-dimension TensorDim.size and the tensor's non_zero_length straight from an IPC SparseTensor flatbuffer message without any range check.
This can yield tensors with negative dimensions and defeats the buffer-size validation in the sparse index readers.

Component(s)

C++

Metadata

Metadata

Assignees

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions