chore: use read_exact in decompress_lz4 (databendlabs#17055)

* chore: use read_exact in decompress_lz4

* tweak cargo audit

Author: dantengsky

.cargo/audit.toml

@@ -47,4 +47,10 @@ ignore = [
     "RUSTSEC-2024-0351",
     # gix-path: improperly resolves configuration path reported by Git
     "RUSTSEC-2024-0371",
+    # Remotely exploitable Denial of Service in Tonic, ignored temporarily 
+    "RUSTSEC-2024-0376",
+    #rustls network-reachable panic in `Acceptor::accept`
+    "RUSTSEC-2024-0399",
+    # `idna` accepts Punycode labels that do not produce any non-ASCII when decoded
+    "RUSTSEC-2024-0421",
 ]

src/common/arrow/src/arrow/io/ipc/compression.rs

@@ -19,7 +19,7 @@ use crate::arrow::error::Result;
 #[cfg_attr(docsrs, doc(cfg(feature = "io_ipc_compression")))]
 pub fn decompress_lz4(input_buf: &[u8], output_buf: &mut [u8]) -> Result<()> {
     use std::io::Read;
-    let _ = lz4_flex::frame::FrameDecoder::new(input_buf).read(output_buf)?;
+    lz4_flex::frame::FrameDecoder::new(input_buf).read_exact(output_buf)?;
     Ok(())
 }