https://issues.apache.org/bugzilla/show_bug.cgi?id=54233

--- Comment #3 from Alan Davis <[email protected]> ---
The attached UnicodeString.java.patch allows POI to recover from the type of
error found in the file generated by http://www.aspose.com The file specifies
an offset to a UnicodeString parameter, which is out by 2 bytes. The real
offset starts on a 4 byte boundary.

The patch works by checking the offsets provided to make sure the UnicodeString
appears valid. The original code checked the UnicodeString ends in a NULL
character, AFTER it had copied the string into a new byte[]. The patch does
this check BEFORE the copy avoiding the creation of a very large byte[]
followed by an ArrayIndexOutOfBoundsException. As a result it is able to also
check if changing the offset to a 4 byte boundary would solve the problem.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to