RFR: 8186334: JarFile throws ArrayIndexOutOfBoundsException when the manifest contains certain characters
paul.sandoz at oracle.com
Mon Aug 21 17:15:32 UTC 2017
> On 21 Aug 2017, at 02:53, Claes Redestad <claes.redestad at oracle.com> wrote:
> this patch addresses an unfortunate regression where backtick characters
> in a manifest can cause an AIOOBE.
> Webrev: http://cr.openjdk.java.net/~redestad/8186334/jdk.00/
> Bug: https://bugs.openjdk.java.net/browse/JDK-8186334
> Basically an off-by-one issue during certain steps in the search algorithm,
> meaning it is context dependent whether a backtick will trip on this issue
> or not.
Ooops, looks good.
I see a workaround has been pushed to Jackson, which reduced my urge to suggest a nine respin. But… being slightly paranoid testing JarFile on a local maven central mirror would give us a better sense of the impact.
More information about the core-libs-dev