debezium/dbz#1503 Detect extra large events

Signed-off-by: Jiri Pechanec <jiri.pechanec@centrum.cz>

Author: jpechane

debezium-connector-binlog/src/main/java/io/debezium/connector/binlog/event/TransactionPayloadDeserializer.java

@@ -19,6 +19,7 @@
 import com.github.shyiko.mysql.binlog.event.deserialization.TransactionPayloadEventDataDeserializer;
 import com.github.shyiko.mysql.binlog.io.ByteArrayInputStream;
 
+import io.debezium.DebeziumException;
 import io.debezium.config.CommonConnectorConfig;
 
 /**
@@ -82,7 +83,11 @@ public TransactionPayloadEventData deserialize(ByteArrayInputStream inputStream)
 
         // Decompress the payload
         byte[] src = eventData.getPayload();
-        byte[] dst = ByteBuffer.allocate(eventData.getUncompressedSize()).array();
+        final var uncompressedSize = eventData.getUncompressedSize();
+        if (uncompressedSize > Integer.MAX_VALUE) {
+            throw new DebeziumException("Cannot process event of size '" + uncompressedSize + "' larger than max array size");
+        }
+        final var dst = ByteBuffer.allocate((int) uncompressedSize).array();
         Zstd.decompressByteArray(dst, 0, dst.length, src, 0, src.length);
 
         // Read and store events from decompressed byte array into input stream

pom.xml

@@ -139,7 +139,7 @@
         <!-- Database drivers, should align with databases -->
         <version.postgresql.driver>42.7.7</version.postgresql.driver>
         <version.mysql.driver>9.1.0</version.mysql.driver>
-        <version.mysql.binlog>0.40.3</version.mysql.binlog>
+        <version.mysql.binlog>0.40.4</version.mysql.binlog>
         <version.mongo.driver>5.5.1</version.mongo.driver>
         <version.sqlserver.driver>12.4.2.jre8</version.sqlserver.driver>
         <version.db2.driver>11.5.0.0</version.db2.driver>