[Bug #790] java.util.zip.DeflaterEngine exception

[nobody]

=================== BUG #790: LATEST MODIFICATIONS ==================
http://savannah.gnu.org/bugs/?func=detailbug&bug_id=790&group_id=85

Changes by: Jochen Hoenicke <address@hidden>
Date: 2002-Jul-05 23:07 (Europe/Berlin)

            What     | Removed                   | Added
---------------------------------------------------------------------------
          Resolution | None                      | Fixed
              Status | In Process                | Closed


------------------ Additional Follow-up Comments ----------------------------
Fixed in CVS.  I choose a different approach, so that the check I posted last 
time is not necessary anymore.




=================== BUG #790: FULL BUG SNAPSHOT ===================


Submitted by: Omnibrain                 Project: classpath                      
Submitted on: 2002-Jul-02 19:50
Severity:  5 - Major                    Resolution:  Fixed                      
Assigned to:  jochen                    Status:  Closed                         
Platform Version:  None                 

Summary:  java.util.zip.DeflaterEngine exception

Original Submission:  I got an exception trying to pack this file with
GZIP (at DeflaterEngine.findLongestMatch).

Code to reproduce this error :

FileInputStream  inputStream = new FileInputStream("test.bin");
GZIPOutputStream outputStream = new GZIPOutputStream(new 
FileOutputStream("test.bin.gz"));

byte[] writeData = new byte[inputStream.available()];
inputStream.read(writeData);
outputStream.write(writeData);
                
inputStream.close();
outputStream.close();

Follow-up Comments
*******************

-------------------------------------------------------
Date: 2002-Jul-05 23:07             By: jochen
Fixed in CVS.  I choose a different approach, so that the check I posted last 
time is not necessary anymore.


-------------------------------------------------------
Date: 2002-Jul-04 11:51             By: jochen
The attached diff file fixes this bug, but I want to investigate this a bit 
further.  There is at least one other possible array overflow in the same 
routine.

BTW, I think zlib has the same bug, but as there are no array bounds checks in 
C nobody has noticed it.



File Attachments
****************

-------------------------------------------------------
Date: 2002-Jul-04 11:51  Name: Defl.diff  Size: 0KB   By: jochen
(Preliminary) bug fix
http://savannah.gnu.org/bugs/download.php?group_id=85&bug_id=790&bug_file_id=49

-------------------------------------------------------
Date: 2002-Jul-02 19:50  Name: test.bin  Size: 63KB   By: Omnibrain
The file that fails.
http://savannah.gnu.org/bugs/download.php?group_id=85&bug_id=790&bug_file_id=47


For detailed info, follow this link:
http://savannah.gnu.org/bugs/?func=detailbug&bug_id=790&group_id=85