poi-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject [Bug 60158] AIOOBE in VBAMacroReader
Date Tue, 18 Oct 2016 12:26:17 GMT
https://bz.apache.org/bugzilla/show_bug.cgi?id=60158

--- Comment #4 from Tim Allison <tallison@mitre.org> ---
I think this is a problem in RLEDecompressingInputStream.

In readChunk(), under 

if ((tokenFlags & POWER2[n]) == 0) {

if the int that is read is 'ff', when that gets cast to a byte, its value
becomes -1.

When we try to readInt() to get the module offset, the first byte returns '-1'
and we think we've hit the end of the stream and return -1.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@poi.apache.org
For additional commands, e-mail: dev-help@poi.apache.org


Mime
View raw message