The GitHub Actions job "CodeQL" on 
commons-compress.git/segmentconstantpool-index-bound has failed.
Run started by GitHub user kali834x (triggered by kali834x).

Head commit for run:
4b6c618af766abe73a611b939a59920c92292b40 / Zibran Khan <[email protected]>
reject out-of-range constant pool index in SegmentConstantPool

getConstantPoolEntry and getValue resolve a bytecode reference operand into a 
constant pool entry but only reject negative indices, so an operand pointing 
past the pool made CpBands.cpUTF8Value and its siblings read the backing array 
out of bounds and throw ArrayIndexOutOfBoundsException out of the declared 
Pack200Exception contract. Both resolvers now report the bad index as a 
Pack200Exception.

Report URL: https://github.com/apache/commons-compress/actions/runs/36284476850

With regards,
GitHub Actions via GitBox

Reply via email to