[
https://issues.apache.org/jira/browse/DIRAPI-467?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18120608#comment-18120608
]
Emmanuel Lécharny commented on DIRAPI-467:
------------------------------------------
Found by Claude
> Strings.toLowerCase(byte[]) crashes on non-ASCII attribute id from network
> --------------------------------------------------------------------------
>
> Key: DIRAPI-467
> URL: https://issues.apache.org/jira/browse/DIRAPI-467
> Project: Directory Client API
> Issue Type: Bug
> Affects Versions: 2.1.8
> Reporter: Emmanuel Lécharny
> Priority: Major
> Fix For: 2.1.9
>
>
> A client searches a hostile server (or *MITM*'d plaintext session); the
> server responds with a _SearchResultEntry_ whose attribute-description *TLV*
> contains _bytes \{0x63, 0xC3, 0xA9\}_.
> Strings.toLowerCase indexes TO_LOWER_CASE_BYTE[-61] and throws AIOOBE, which
> escapes the decoder as a RuntimeException; application code catching only
> LdapException mishandles or crashes.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
