RFR: 8263509: LdapSchemaParser.readNextTag checks array length incorrectly
Aleksei Efimov
aefimov at openjdk.java.net
Tue Mar 16 10:57:09 UTC 2021
On Fri, 12 Mar 2021 13:25:31 GMT, Aleksey Shipilev <shade at openjdk.org> wrote:
> SonarCloud rightfully says:
> The length of "values" is always ">=0", so update this test to either "==0" or ">0".
>
> // make sure at least one value was returned
> if(values.length < 0) { // <--- here
> throw new InvalidAttributeValueException("no values for " +
> "attribute "" +
> tagName + """);
> }
>
> There is a subsequent access to values[0], which means the failure would throw `AIOOB`, not `InvalidAttributeValueException`.
>
> Additional testing:
> - [x] Linux x86_64 fastdebug, `com/sun/jndi`
Marked as reviewed by aefimov (Committer).
-------------
PR: https://git.openjdk.java.net/jdk/pull/2968
More information about the core-libs-dev
mailing list