CRITICAL: Deserialization returns incomplete tuple silently #153

Why is this an issue?

In src/storage/heap_table.cpp:239:

for (uint16_t i = 0; i < num_values && offset < data.size(); i++) {

If num_values exceeds data, tuple returned with fewer values than schema. No error indication.

What is causing it?

Silent truncation in deserialization.

How can it be solved?

Return error when tuple doesn't match schema.

Category

• Small
• Medium
• Large
• Critical

Severity

• Low
• Medium
• High
• Critical