File size: 4,309 Bytes
ae82e13 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 | {
"python": "3.12.3 (main, Mar 23 2026, 19:04:32) [GCC 13.3.0]",
"cwd": "/home/hacnho/Projects/research",
"huge_declared_length": 2147483647,
"control_size": 155,
"malicious_size": 158,
"memory_limit_mb": 512,
"results": [
{
"path": "/tmp/tmpb1tkdk9g/control.avro",
"mode": "fastavro",
"returncode": 0,
"elapsed": 0.050711631774902344,
"stdout": "[{'x': 1}]\n",
"stderr": "",
"memory_error": false
},
{
"path": "/tmp/tmpb1tkdk9g/control.avro",
"mode": "apache-avro",
"returncode": 0,
"elapsed": 0.06384634971618652,
"stdout": "[{'x': 1}]\n",
"stderr": "",
"memory_error": false
},
{
"path": "/tmp/tmpb1tkdk9g/malicious-huge-avro-schema-length.avro",
"mode": "fastavro",
"returncode": 1,
"elapsed": 0.053327322006225586,
"stdout": "",
"stderr": "Traceback (most recent call last):\n File \"<string>\", line 7, in <module>\n File \"fastavro/_read.pyx\", line 1137, in fastavro._read.reader.__init__\n File \"fastavro/_read.pyx\", line 1064, in fastavro._read.file_reader.__init__\n File \"fastavro/_read.pyx\", line 780, in fastavro._read._read_data\n File \"fastavro/_read.pyx\", line 654, in fastavro._read.read_record\n File \"fastavro/_read.pyx\", line 764, in fastavro._read._read_data\n File \"fastavro/_read.pyx\", line 487, in fastavro._read.read_map\n File \"fastavro/_read.pyx\", line 750, in fastavro._read._read_data\n File \"fastavro/_read.pyx\", line 298, in fastavro._read.read_bytes\nMemoryError\n",
"memory_error": true
},
{
"path": "/tmp/tmpb1tkdk9g/malicious-huge-avro-schema-length.avro",
"mode": "apache-avro",
"returncode": 1,
"elapsed": 0.0594182014465332,
"stdout": "",
"stderr": "Traceback (most recent call last):\n File \"<string>\", line 12, in <module>\n File \"/home/hacnho/Projects/research/targets/huntr/work/avro-lab/.venv/lib/python3.12/site-packages/avro/datafile.py\", line 327, in __init__\n self._read_header()\n File \"/home/hacnho/Projects/research/targets/huntr/work/avro-lab/.venv/lib/python3.12/site-packages/avro/datafile.py\", line 377, in _read_header\n header = cast(HeaderType, self.datum_reader.read_data(META_SCHEMA, META_SCHEMA, self.raw_decoder))\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/hacnho/Projects/research/targets/huntr/work/avro-lab/.venv/lib/python3.12/site-packages/avro/io.py\", line 717, in read_data\n return self.read_record(writers_schema, readers_schema, decoder)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/hacnho/Projects/research/targets/huntr/work/avro-lab/.venv/lib/python3.12/site-packages/avro/io.py\", line 912, in read_record\n field_val = self.read_data(field.type, readers_field.type, decoder)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/hacnho/Projects/research/targets/huntr/work/avro-lab/.venv/lib/python3.12/site-packages/avro/io.py\", line 714, in read_data\n return self.read_map(writers_schema, readers_schema, decoder)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/hacnho/Projects/research/targets/huntr/work/avro-lab/.venv/lib/python3.12/site-packages/avro/io.py\", line 843, in read_map\n read_items[key] = self.read_data(writers_schema.values, readers_schema.values, decoder)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/hacnho/Projects/research/targets/huntr/work/avro-lab/.venv/lib/python3.12/site-packages/avro/io.py\", line 696, in read_data\n return decoder.read_bytes()\n ^^^^^^^^^^^^^^^^^^^^\n File \"/home/hacnho/Projects/research/targets/huntr/work/avro-lab/.venv/lib/python3.12/site-packages/avro/io.py\", line 312, in read_bytes\n return self.read(self.read_long())\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/home/hacnho/Projects/research/targets/huntr/work/avro-lab/.venv/lib/python3.12/site-packages/avro/io.py\", line 217, in read\n read_bytes = self.reader.read(n)\n ^^^^^^^^^^^^^^^^^^^\nMemoryError\n",
"memory_error": true
}
],
"finding": true
}
|