From 832447e15d2d48ce7e98d0265822e89cc3fec7cb Mon Sep 17 00:00:00 2001
From: Dongjoon Hyun <dongjoon@apache.org>
Date: Mon, 6 Jul 2026 23:16:03 -0700
Subject: [PATCH] ORC-2193: Parse encrypted FileStatistics via
 createCodedInputStream

---
 java/core/src/java/org/apache/orc/impl/ReaderImpl.java | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/java/core/src/java/org/apache/orc/impl/ReaderImpl.java b/java/core/src/java/org/apache/orc/impl/ReaderImpl.java
index 029197bd9d..b23478393a 100644
--- a/java/core/src/java/org/apache/orc/impl/ReaderImpl.java
+++ b/java/core/src/java/org/apache/orc/impl/ReaderImpl.java
@@ -412,7 +412,8 @@ private ColumnStatistics[] decryptFileStats(ReaderEncryptionVariant encryption,
                                            .withEncryption(algorithm, key, iv);
       InStream in = InStream.create("encrypted file stats", buffer,
           0, bytes.length, options);
-      OrcProto.FileStatistics decrypted = OrcProto.FileStatistics.parseFrom(in);
+      OrcProto.FileStatistics decrypted =
+          OrcProto.FileStatistics.parseFrom(InStream.createCodedInputStream(in));
       ColumnStatistics[] result = new ColumnStatistics[decrypted.getColumnCount()];
       TypeDescription root = encryption.getRoot();
       for(int i= 0; i < result.length; ++i){