This is an automated email from the ASF dual-hosted git repository.

ggregory pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-compress.git


The following commit(s) were added to refs/heads/master by this push:
     new 5fa395fd5 [COMPRESS-712] Unsanitized read causes 
IndexOutOfBoundsException in DumpArchiveInputStream.java:359
5fa395fd5 is described below

commit 5fa395fd5c35a1c1c3cbd87c6324b13aa23ee0ed
Author: Gary Gregory <[email protected]>
AuthorDate: Mon Nov 17 08:26:12 2025 -0500

    [COMPRESS-712] Unsanitized read causes IndexOutOfBoundsException in
    DumpArchiveInputStream.java:359
---
 src/changes/changes.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index ad0519788..5547f1b8b 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -65,6 +65,7 @@ The <action> type attribute can be add,update,fix,remove.
       <action type="fix" dev="pkarwasz" due-to="Tyler Nighswander">Align DUMP 
archive block size with Linux `dump` utility.</action>
       <action type="fix" dev="ggregory" due-to="Tyler Nighswander, Gary 
Gregory">DumpArchiveInputStream.getNextEntry() throws an ArchiveException 
instead of ArrayIndexOutOfBoundsException.</action>
       <action type="fix" dev="pkarwasz" due-to="Piotr P. Karwasz">Fix 
DumpArchiveInputStream to correctly handle file names up to 255 bytes 
#711.</action>
+      <action type="fix" dev="ggregory" due-to="Philip Betzler-Braun, Gary 
Gregory, Piotr P. Karwasz" issue="COMPRESS-712">Unsanitized read causes 
IndexOutOfBoundsException in #749.</action>
       <!-- FIX zip -->
       <action type="fix" dev="ggregory" due-to="Dominik Stadler, Gary Gregory" 
issue="COMPRESS-598">ZipArchiveInputStream.read(byte[], int, int) now throws an 
IOException instead of a NullPointerException.</action>
       <action type="fix" dev="ggregory" due-to="Tyler Nighswander, Gary 
Gregory">ZipFile.createBoundedInputStream(long, long) now throws an 
ArchiveException instead of IllegalArgumentException.</action>

Reply via email to