Backport #94855 to 25.8: Add index out of range check in advanced shared data in JSON

robot-clickhouse · robot-clickhouse · commit 5cb34538b263 · 2026-01-22T22:14:04.000Z
diff --git a/src/DataTypes/Serializations/SerializationObjectHelpers.cpp b/src/DataTypes/Serializations/SerializationObjectHelpers.cpp
@@ -226,6 +226,9 @@ void deserializeIndexesAndCollectPathsImpl(ColumnString & paths_column, ReadBuff
         T index;
         readBinaryLittleEndian(index, istr);
 
+        if (index >= paths.size())
+            throw Exception(ErrorCodes::LOGICAL_ERROR, "Object path index is out of range: {} >= {}", static_cast<UInt64>(index), paths.size());
+
         const String & path = paths[index];
         offset += path.size();
         offsets.push_back(offset);
@@ -282,7 +285,6 @@ void deserializeIndexesAndCollectPaths(IColumn & paths_column, ReadBuffer & istr
         default:
             throw Exception(ErrorCodes::LOGICAL_ERROR, "Unexpected column type of paths indexes: {}", indexes_type->getName());
     }
-
 }
 
 }

Original file line number	Diff line number	Diff line change
`@@ -226,6 +226,9 @@ void deserializeIndexesAndCollectPathsImpl(ColumnString & paths_column, ReadBuff`
`226`	`226`	`T index;`
`227`	`227`	`readBinaryLittleEndian(index, istr);`
`228`	`228`
	`229`	`+ if (index >= paths.size())`
	`230`	`+ throw Exception(ErrorCodes::LOGICAL_ERROR, "Object path index is out of range: {} >= {}", static_cast<UInt64>(index), paths.size());`
	`231`	`+`
`229`	`232`	`const String & path = paths[index];`
`230`	`233`	`offset += path.size();`
`231`	`234`	`offsets.push_back(offset);`
`@@ -282,7 +285,6 @@ void deserializeIndexesAndCollectPaths(IColumn & paths_column, ReadBuffer & istr`
`282`	`285`	`default:`
`283`	`286`	`throw Exception(ErrorCodes::LOGICAL_ERROR, "Unexpected column type of paths indexes: {}", indexes_type->getName());`
`284`	`287`	`}`
`285`		`-`
`286`	`288`	`}`
`287`	`289`
`288`	`290`	`}`