Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

IonReader.newBytes() throwing NegativeArraySizeException #469

Closed
cowtowncoder opened this issue Jan 25, 2024 · 1 comment · Fixed by #482
Closed

IonReader.newBytes() throwing NegativeArraySizeException #469

cowtowncoder opened this issue Jan 25, 2024 · 1 comment · Fixed by #482
Labels
2.17 fuzz Issue found by OssFuzz ion

Comments

@cowtowncoder
Copy link
Member

OSS-Fuzz reported a problem with stack trace of:

== Java Exception: java.lang.NegativeArraySizeException: -81
	 at com.amazon.ion.impl.IonReaderContinuableCoreBinary.newBytes(IonReaderContinuableCoreBinary.java:565)
	 at com.fasterxml.jackson.dataformat.ion.IonParser.getEmbeddedObject(IonParser.java:592)
	 at com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer._fromEmbedded(JsonNodeDeserializer.java:836)
	 at com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer._deserializeRareScalar(JsonNodeDeserializer.java:697)
	 at com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer._deserializeContainerNoRecursion(JsonNodeDeserializer.java:645)
	 at com.fasterxml.jackson.databind.deser.std.JsonNodeDeserializer.deserialize(JsonNodeDeserializer.java:104)
	 at com.fasterxml.jackson.databind.deser.std.JsonNodeDeserializer.deserialize(JsonNodeDeserializer.java:25)
	 at com.fasterxml.jackson.databind.deser.DefaultDeserializationContext.readRootValue(DefaultDeserializationContext.java:342)
	 at com.fasterxml.jackson.databind.ObjectMapper._readValue(ObjectMapper.java:4876)
	 at com.fasterxml.jackson.databind.ObjectMapper.readTree(ObjectMapper.java:3145)

with specifically generated corrupt Ion document.
@cowtowncoder cowtowncoder added ion fuzz Issue found by OssFuzz 2.17 labels Jan 25, 2024
cowtowncoder added a commit that referenced this issue Jan 25, 2024
@cowtowncoder
Add test for #469 under failing (to avoid breaking CI)
665f045
@cowtowncoder
Copy link
Member Author

cc @tgregg -- this is first of 3 new/re-created OSS-Fuzz issues: will add PR for reproduction.

@cowtowncoder cowtowncoder mentioned this issue Jan 25, 2024
Merged
cowtowncoder added a commit that referenced this issue Jan 25, 2024
@cowtowncoder
Add test for #469 under failing (to avoid breaking CI) (#470)
a68825a
@tgregg tgregg mentioned this issue Jan 25, 2024
Merged
@tgregg tgregg mentioned this issue Feb 9, 2024
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
2.17 fuzz Issue found by OssFuzz ion
Projects
None yet
Milestone
No milestone
1 participant
@cowtowncoder