[xiaobai0529]

Summary

• Run latbuffers::Verifier over Feather V1 metadata before bs::GetCTable, so malformed metadata returns Status::Invalid instead of being dereferenced.
• Add a regression test using the 36-byte input from [C++] Out-of-bounds read in Apache Arrow C++ Feather V1 reader: feather::Reader::Open calls fbs::GetCTable with no flatbuffers::Verifier #50229.

Root cause

\ReaderV1::Open\ passed attacker-controlled metadata directly to \bs::GetCTable, and \ReadSchema\ then accessed \metadata_->columns()\ before any validation. This caused an out-of-bounds read reported by ASan.

Fixes #50229

Verification

• \�rrow-feather-test: 84 passed, 2 skipped (the two skips are pre-existing platform-specific skip cases).
• Focused regression test \TestFeatherReader.RejectsInvalidV1Metadata: passed.
• Built in WSL Ubuntu against Arrow commit \373d64c02cb23663b63c5853099fca43a46c39fc.

AI assistance

I used an AI coding assistant for investigation and drafting this patch. I reviewed the final diff and the verifier API, and ran the tests above locally.

• GitHub Issue: [C++] Out-of-bounds read in Apache Arrow C++ Feather V1 reader: feather::Reader::Open calls fbs::GetCTable with no flatbuffers::Verifier #50229

[github-actions]

Thanks for opening a pull request!

This pull request has been automatically converted to a draft because its title doesn't match Arrow's required format.

If this is not a minor PR, could you open an issue for this pull request on GitHub? https://github.com/apache/arrow/issues/new/choose

Opening GitHub issues ahead of time contributes to the Openness of the Apache Arrow project.

Then could you also rename the pull request title in the following format?

GH-${GITHUB_ISSUE_ID}: [${COMPONENT}] ${SUMMARY}

or

MINOR: [${COMPONENT}] ${SUMMARY}

After updating the title, you can mark the pull request as ready for review.

See also:

• Other pull requests
• Contribution Guidelines - Contributing Overview

[github-actions]

⚠️ GitHub issue #50229 has been automatically assigned in GitHub to PR creator.

[github-actions]

⚠️ GitHub issue #50229 has no components, please add labels for components.