[ https://issues.apache.org/jira/browse/COMPRESS-598 ]


    Gary D. Gregory deleted comment on COMPRESS-598:
    ------------------------------------------

was (Author: garydgregory):
I added the attached jar file as a test fixture for 
{{org.apache.commons.compress.archivers.ListerTest}}.

> NullPointerException in ZipArchiveInputStream.getCompressedCount()
> ------------------------------------------------------------------
>
>                 Key: COMPRESS-598
>                 URL: https://issues.apache.org/jira/browse/COMPRESS-598
>             Project: Commons Compress
>          Issue Type: Bug
>          Components: Archivers
>    Affects Versions: 1.21
>            Reporter: Dominik Stadler
>            Priority: Critical
>              Labels: NullPointerException, fuzzer, npe
>         Attachments: Crash_f2efd9eaeb86cda597d07b5e3c3d81363633c2da.java, 
> crash-f2efd9eaeb86cda597d07b5e3c3d81363633c2da
>
>
> While fuzzing Apache POI, I discovered a case which can trigger a 
> NullPointerException in ZipArchiveInputStream.getCompressedCount().
> The attached test-application and file are a fairly minimal reproducing 
> testcase.
> Put the java file into src/test/java and the file into /src/test/resources
> Running it then produces the following:
> {noformat}
> Exception in thread "main" java.lang.NullPointerException
>     at 
> org.apache.commons.compress.archivers.zip.ZipArchiveInputStream.getCompressedCount(ZipArchiveInputStream.java:559)
>     at 
> Crash_f2efd9eaeb86cda597d07b5e3c3d81363633c2da.main(Crash_f2efd9eaeb86cda597d07b5e3c3d81363633c2da.java:26)
>  {noformat}
>  
> Happens with 1.21 as well as  latest.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to