CLONE -ArrayIndexOutOfBoundsException from integer overflow in
WriterToUTF8Buffered#write()
-------------------------------------------------------------------------------------------
Key: XALANJ-2366
URL: https://issues.apache.org/jira/browse/XALANJ-2366
Project: XalanJ2
Issue Type: Bug
Components: Serialization
Affects Versions: 2.6
Environment: Operating System: All
Platform: All
Reporter: Martin Suter
Assigned To: Xalan Developers Mailing List
Fix For: 2.7
The rework to chunk buffers of data in the write(char [], int, int)
method can lead to an integer overflow in the computation of the end_chunk
then start_chunk variables. When the latter value becomes negative it
leads to an illegal array reference into the chars array. With the numbers
in play a data block of 4MB can lead to this situation.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
