[
https://issues.apache.org/jira/browse/LANG-1824?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Veijo Vainionpää updated LANG-1824:
-----------------------------------
Description:
NegativeArraySizeException thrown from Strings.replace with larger replacement
when{{ }}{{{{replacement.length() - searchString.length() }}}}is bigger than
134217727 bytes (~132 MB).
{{{{public String replace(final String text, String searchString, final String
replacement, int max) {}}
{{ }}}}{{{{...}}}}
{{{{ final int replLength = searchString.length();}}
{{ }}}}{{{{int increase = Math.max(replacement.length() - replLength, 0);}}}}
{{{{ }}{{{color:#de350b}{{increase *= max < 0 ? 16 : Math.min(max,
64);}}{color}}}
{{ final StringBuilder buf = new StringBuilder(text.length() + increase);}}
{{ ...}}}}
The main reason is that the integer overflows after multiplication.
was:
NegativeArraySizeException thrown from Strings.replace with larger replacement
when {{replacement.length() - }}{{searchString.length()}} is bigger than
134217727 bytes (~132 MB).
{{{{public String replace(final String text, String searchString, final String
replacement, int max) {}}}}
{{{{ ...}}}}
{{{{ final int replLength = searchString.length();}}}}
{{{{ }}{{int increase = Math.max(replacement.length() - replLength, 0);}}}}
{{{color:#de350b}{{ }}{{increase *= max < 0 ? 16 : Math.min(max, 64);}}
final StringBuilder buf = new StringBuilder(text.length() + increase);
...{color}}}
The main reason is that the integer overflows after multiplication.
> NegativeArraySizeException thrown from Strings.replace with larger replacement
> ------------------------------------------------------------------------------
>
> Key: LANG-1824
> URL: https://issues.apache.org/jira/browse/LANG-1824
> Project: Commons Lang
> Issue Type: Bug
> Components: lang.*
> Affects Versions: 3.20.0
> Reporter: Veijo Vainionpää
> Priority: Major
>
> NegativeArraySizeException thrown from Strings.replace with larger
> replacement when{{ }}{{{{replacement.length() - searchString.length() }}}}is
> bigger than 134217727 bytes (~132 MB).
> {{{{public String replace(final String text, String searchString, final
> String replacement, int max) {}}
> {{ }}}}{{{{...}}}}
> {{{{ final int replLength = searchString.length();}}
> {{ }}}}{{{{int increase = Math.max(replacement.length() - replLength,
> 0);}}}}
> {{{{ }}{{{color:#de350b}{{increase *= max < 0 ? 16 : Math.min(max,
> 64);}}{color}}}
> {{ final StringBuilder buf = new StringBuilder(text.length() + increase);}}
> {{ ...}}}}
> The main reason is that the integer overflows after multiplication.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
