Describe the bug, including details regarding any error messages, version, and platform.

After this resize

It's not guaranteed that buffer_->size() - buffer_pos_ >= nbytes because of the special case here:

That code path assumes that buffer_pos_ will be reset to zero after the resize, but it is not reset. As a result, in this code:

we write to buffer_->mutable_data() + buffer_pos_ + bytes_buffered_, which can access memory beyond the end of the buffer in some cases

I have a repro, but it requires a very large file and a significant amount of internal code, so I cannot post it.

Such diff fixed the issue for me main...chegoryu:arrow:fix-buffered-io

Component(s)

C++