poi-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject [Bug 60158] AIOOBE in VBAMacroReader
Date Tue, 18 Oct 2016 12:26:17 GMT

--- Comment #4 from Tim Allison <tallison@mitre.org> ---
I think this is a problem in RLEDecompressingInputStream.

In readChunk(), under 

if ((tokenFlags & POWER2[n]) == 0) {

if the int that is read is 'ff', when that gets cast to a byte, its value
becomes -1.

When we try to readInt() to get the module offset, the first byte returns '-1'
and we think we've hit the end of the stream and return -1.

You are receiving this mail because:
You are the assignee for the bug.

To unsubscribe, e-mail: dev-unsubscribe@poi.apache.org
For additional commands, e-mail: dev-help@poi.apache.org

View raw message