arthurscchan opened a new pull request, #219:
URL: https://github.com/apache/commons-codec/pull/219

   This fixes a possible ArrayIndexOutOfBoundException in 
[src/main/java/org/apache/commons/codec/language/RefinedSoundex.java](https://github.com/apache/commons-codec/blob/master/src/main/java/org/apache/commons/codec/language/RefinedSoundex.java)
   
   This PR adds a conditional checking to ensure the index is never out of 
bounds from the configured soundexMapping array. If the calculated index goes 
out of bounds, it will simply return 0, just like the original logic when 
Character.isLetter() returns false.
   
   We found this bug using fuzzing by way of OSS-Fuzz. It is reported at 
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64353.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to