repr: Harden proto/Row decoding against malformed input#36984

Open

def- wants to merge 12 commits into

MaterializeInc:mainfrom

Commits on Jun 11, 2026

repr: Validate ProtoNumeric.bcd non-empty before C decode
def-
committed
repr: Propagate ProtoRange decode errors instead of panicking
def-
committed
repr: Validate CheckedTimestamp range in from_proto
def-
committed
repr: Validate Date range in from_proto
def-
committed
repr: Propagate custom_id decode errors in ProtoScalarType
def-
committed
repr: Reject ProtoRelationDesc with mismatched names/metadata lengths
def-
committed
repr: Reject Null range bounds when decoding ProtoRow

def-
and
claude
committed
repr: Guard parse_uuid against the uuid crate panicking on short input

def-
and
claude
committed
repr: Reject malformed range data on decode instead of asserting

def-
and
claude
committed
repr: Reject ProtoRow dicts with unordered or duplicate keys on decode

def-
and
claude
committed
repr: Avoid panicking when truncating off-minute leap-second timestamps

def-
and
claude
committed
repr: Fix panic decoding an Avro decimal with empty unscaled bytes

def-
and
claude
committed