avoid integer overflow in container size precheck

[dxbjavid]

the container size precheck multiplies a wire-controlled element count by the per-element minimum size in 32-bit int, so a crafted list, set or map header can wrap the product down to a small or zero value and slip past the maxMessageSize guard, letting an oversized container through before any allocation is bounded. the same shape sits in the binary, compact and json protocols and the protocol base, plus the c_glib binary and compact readers. widen the multiplication to the long type checkReadBytesAvailable already takes so the count can no longer overflow, and add a regression test for the three c++ protocols.

[Jens-G]

Code review

Found 2 issues:

1. static_cast<long> and (glong) are 32-bit on Windows/MSVC (LLP64 data model), the same width as int, so the multiplication still overflows there. The fix works on POSIX (LP64) where long is 64-bit, but not on Windows. Use int64_t/gint64 instead (and update TTransport::checkReadBytesAvailable's signature accordingly).

thrift/lib/cpp/src/thrift/protocol/TBinaryProtocol.h

Lines 175 to 192 in 068af36

	void checkReadBytesAvailable(TSet& set) override
	{
	trans_->checkReadBytesAvailable(static_cast<long>(set.size_) * getMinSerializedSize(set.elemType_));
	}
	void checkReadBytesAvailable(TList& list) override
	{
	trans_->checkReadBytesAvailable(static_cast<long>(list.size_) * getMinSerializedSize(list.elemType_));
	}
	void checkReadBytesAvailable(TMap& map) override
	{
	int elmSize = getMinSerializedSize(map.keyType_) + getMinSerializedSize(map.valueType_);
	trans_->checkReadBytesAvailable(static_cast<long>(map.size_) * elmSize);
	}
	protected:
	template <typename StrType>

The same pattern appears in TCompactProtocol.h, TJSONProtocol.h, TProtocol.h, thrift_binary_protocol.c, and thrift_compact_protocol.c.

2. PR title and commit message are missing the required THRIFT-NNNN: prefix and Client: cpp,c_glib trailer required by AGENTS.md §2 for non-trivial changes. Please file a JIRA ticket at https://issues.apache.org/jira/browse/THRIFT and update the PR title and commit message.

🤖 Generated with Claude Code

_{- If this code review was useful, please react with 👍. Otherwise, react with 👎.}