[C++][Gandiva] Some string functions may be overflowed

[kou]

Describe the bug, including details regarding any error messages, version, and platform.

Related issue: #49159

See also: https://huntr.com/bounties/12ee8dbe-0ac7-4724-9fd9-d4f203b36c62

We need to review all string functions.

Component(s)

C++, Gandiva

[kou]

@dmitry-chirkov-dremio @lriggs @akravchukdremio @xxlaykxx Could you take a look at this?

[dmitry-chirkov-dremio]

@kou I'm tracking few issues internally for Dremio that I'd like to get to (eventually) so yeas, this would fit.

Examples:

• Gandiva castVARCHAR decimal128 causes SIGSEGV crash
• GH-49470: [C++][Gandiva] Fix crashes in substring_index and truncate with extreme integer values #49471
• GH-49420: [C++][Gandiva] Fix castVARCHAR memory allocation and len<=0 handling #49421

I can't commit myself or the team right this moment to this however huntr report looks very actionable for myself being bored one of these weekends.

Anything else on your list that caught your eye?

[kou]

Thanks. There are only 2 active reports (that aren't fixed yet) for Gandiva (this and #49752) and they are already rejected. They are just normal bugs not security vulnerabilities.

[abtom87]

@kou Is this already taken or could i have a look at this bug?

[kou]

You can have a look at this bug.

[abtom87]

take