[ 
https://issues.apache.org/jira/browse/OPENNLP-1826?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Martin Wiesner updated OPENNLP-1826:
------------------------------------
        Fix Version/s: 1.9.5
    Affects Version/s: 1.9.4

> Prevent OOM during Array Allocation
> -----------------------------------
>
>                 Key: OPENNLP-1826
>                 URL: https://issues.apache.org/jira/browse/OPENNLP-1826
>             Project: OpenNLP
>          Issue Type: Bug
>    Affects Versions: 1.9.4, 2.5.9, 3.0.0-M3
>            Reporter: Subbu
>            Assignee: Richard Zowalla
>            Priority: Major
>              Labels: security
>             Fix For: 1.9.5, 2.5.10, 3.0.0-M4
>
>          Time Spent: 40m
>  Remaining Estimate: 0h
>
> {{HeadRules}} (English) and {{AncoraSpanishHeadRules}} (Spanish) parsed the
> tag count field from head rules files with {{Integer.parseInt()}} and used
> the result directly as an array size with no bounds check. A crafted model
> file with a count of {{Integer.MAX_VALUE}} would trigger an immediate
> {{OutOfMemoryError}} during parser model loading.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to