Author: centic Date: Sat Jan 11 09:24:20 2025 New Revision: 1923061 URL: http://svn.apache.org/viewvc?rev=1923061&view=rev Log: Bug 66425: Avoid exceptions found via poi-fuzz
Prevent a NullPointerException Fixes https://issues.oss-fuzz.com/issues/42537720 Added: poi/trunk/test-data/document/clusterfuzz-testcase-minimized-POIHWPFFuzzer-5195207308541952.doc Modified: poi/trunk/poi-scratchpad/src/main/java/org/apache/poi/hwpf/converter/AbstractWordUtils.java poi/trunk/test-data/spreadsheet/stress.xls Modified: poi/trunk/poi-scratchpad/src/main/java/org/apache/poi/hwpf/converter/AbstractWordUtils.java URL: http://svn.apache.org/viewvc/poi/trunk/poi-scratchpad/src/main/java/org/apache/poi/hwpf/converter/AbstractWordUtils.java?rev=1923061&r1=1923060&r2=1923061&view=diff ============================================================================== --- poi/trunk/poi-scratchpad/src/main/java/org/apache/poi/hwpf/converter/AbstractWordUtils.java (original) +++ poi/trunk/poi-scratchpad/src/main/java/org/apache/poi/hwpf/converter/AbstractWordUtils.java Sat Jan 11 09:24:20 2025 @@ -240,6 +240,11 @@ public class AbstractWordUtils { } } + // ensure the format does not grow too large, number-format + // can be roman-numbers, where very large numbers would have + // very many "M" and thus may cause memory to overload + IOUtils.safelyAllocateCheck(num, MAX_BULLET_BUFFER_SIZE/10); + bulletBuffer.append( NumberFormatter.getNumber( num, list.getNumberFormat( level ) ) ); } else { Added: poi/trunk/test-data/document/clusterfuzz-testcase-minimized-POIHWPFFuzzer-5195207308541952.doc URL: http://svn.apache.org/viewvc/poi/trunk/test-data/document/clusterfuzz-testcase-minimized-POIHWPFFuzzer-5195207308541952.doc?rev=1923061&view=auto ============================================================================== Binary files poi/trunk/test-data/document/clusterfuzz-testcase-minimized-POIHWPFFuzzer-5195207308541952.doc (added) and poi/trunk/test-data/document/clusterfuzz-testcase-minimized-POIHWPFFuzzer-5195207308541952.doc Sat Jan 11 09:24:20 2025 differ Modified: poi/trunk/test-data/spreadsheet/stress.xls URL: http://svn.apache.org/viewvc/poi/trunk/test-data/spreadsheet/stress.xls?rev=1923061&r1=1923060&r2=1923061&view=diff ============================================================================== Binary files - no diff available. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
