Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ArrayIndexOutOfBoundsException in UTF8Reader (ossfuzz) #465

Closed
cowtowncoder opened this issue Apr 5, 2021 · 2 comments
Closed

ArrayIndexOutOfBoundsException in UTF8Reader (ossfuzz) #465

cowtowncoder opened this issue Apr 5, 2021 · 2 comments
Labels
fuzz Issue found by OssFuzz
Milestone
2.13.0

Comments

@cowtowncoder
Copy link
Member

(note: from Ossfuzz issue 32906: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32906)

Looks like there is a boundary condition with UTF-8 codec.
@cowtowncoder
Copy link
Member Author

Created FasterXML/woodstox#124 for this, issue reproducible on Woodstox (but once again, requires specific input source to get right boundary condition).

@cowtowncoder cowtowncoder added fuzz Issue found by OssFuzz 2.13 labels Apr 5, 2021
@cowtowncoder
Copy link
Member Author

Fixed on Woodstox side, need to wait for 6.2.5 for a bit (anticipating some more reports still :) ).

(note that so far neither bug likely to occur for users, bit esoteric boundary conditions on invalid documents)

cowtowncoder added a commit that referenced this issue Apr 5, 2021
@cowtowncoder
Add (failing) test for #465 (waiting for Woodstox fix)
8ee537b
cowtowncoder added a commit that referenced this issue Apr 5, 2021
@cowtowncoder
Update Woodstox to 6.2.5, resolved #463 and #465
5bceeb2
@cowtowncoder cowtowncoder added this to the 2.13.0 milestone Apr 6, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
fuzz Issue found by OssFuzz
Projects
None yet
Milestone
2.13.0
Development

No branches or pull requests
1 participant
@cowtowncoder