[
https://issues.apache.org/jira/browse/ARTEMIS-5662?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Justin Bertram updated ARTEMIS-5662:
------------------------------------
Description:
A bug was discovered as a result of fuzz-testing of SimpleString class methods:
NegativeArraySizeException is thrown when passing a capacity greater than 2^30
to the StringSimpleStringPool constructor.
I have created a standalone repro for this bug (attached archive). You can
reproduce it by running the following command:
{code:java}
java -cp .:jars/* NegativeArraySizeBug.java{code}
This bug does not pose a threat, but since the constructor is public, please
consider the possibility of handling this exception or adding information about
it to the documentation.
was:
A bug was discovered as a result of fuzz-testing of SimpleString class methods:
NegativeArraySizeException is thrown when passing a capacity greater than 2^30
to the StringSimpleStringPool constructor.
I have created a standalone repro for this bug (attached archive). You can
reproduce it by running the following command:
{code:java}
java -cp .:jars/* NegativeArraySizeBug.java{code}
This bug does not pose a threat, but since the constructor is public, please
consider the possibility of handling this exception or adding information about
it to the documentation.
Found by [Linux Verification Center|https://portal.linuxtesting.ru/]
> NegativeArraySizeException in StringSimpleStringPool's constructor
> ------------------------------------------------------------------
>
> Key: ARTEMIS-5662
> URL: https://issues.apache.org/jira/browse/ARTEMIS-5662
> Project: ActiveMQ Artemis
> Issue Type: Bug
> Affects Versions: 2.31.2, 2.43.0
> Environment: openjdk version "21.0.8" 2025-07-15
> Reporter: Mikhail Titov
> Priority: Minor
> Attachments: NegativeArraySizeException_ StringSimpleStringPool.tar
>
>
> A bug was discovered as a result of fuzz-testing of SimpleString class
> methods:
> NegativeArraySizeException is thrown when passing a capacity greater than
> 2^30 to the StringSimpleStringPool constructor.
> I have created a standalone repro for this bug (attached archive). You can
> reproduce it by running the following command:
> {code:java}
> java -cp .:jars/* NegativeArraySizeBug.java{code}
> This bug does not pose a threat, but since the constructor is public, please
> consider the possibility of handling this exception or adding information
> about it to the documentation.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
For further information, visit: https://activemq.apache.org/contact
