[Bug 1090] New: org.jacorb.orb.TaggedComponentList.removeComponents() generates ArrayIndexOutOfBounds
[email protected] Wed, 19 Oct 2016 21:36:30 +0000
| Newsgroups | gmane.comp.corba.jacorb.bugs |
|---|---|
| Message-ID | <[email protected]/bugzilla/> |
--===============6537675607776238881==
Content-Type: multipart/alternative; boundary="1476912991.Eff41.12933";
charset="UTF-8"
--1476912991.Eff41.12933
Date: Wed, 19 Oct 2016 17:36:31 -0400
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
http://www.jacorb.org/bugzilla/show_bug.cgi?id=1090
Bug ID: 1090
Summary: org.jacorb.orb.TaggedComponentList.removeComponents()
generates ArrayIndexOutOfBounds
Product: JacORB
Version: 3.6
Hardware: PC
OS: All
Status: NEW
Severity: normal
Priority: P5
Component: ORB
Assignee: [email protected]
Reporter: [email protected]
In core/src/main/java/org/jacorb/orb/TaggedComponentList.removeComponents(),
there is bug that causes an ArrayIndexOutOfBounds to be thrown.
The TaggedComponent[] newComponents is sized smaller than 'components' if there
are any tags to be removed, however the for loop at the end is indexing into
both 'newComponents' and 'components' with the same index and it goes boom when
it walks off the end of 'newComponents'.
Reported against JacORB-3.6, but the code in 3.7 looks identical.
--
You are receiving this mail because:
You are the assignee for the bug.
--1476912991.Eff41.12933
Date: Wed, 19 Oct 2016 17:36:31 -0400
MIME-Version: 1.0
Content-Type: text/html; charset="UTF-8"
<html>
<head>
<base href="http://www.jacorb.org/bugzilla/" />
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - org.jacorb.orb.TaggedComponentList.removeComponents() generates ArrayIndexOutOfBounds"
href="http://www.jacorb.org/bugzilla/show_bug.cgi?id=1090">1090</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>org.jacorb.orb.TaggedComponentList.removeComponents() generates ArrayIndexOutOfBounds
</td>
</tr>
<tr>
<th>Product</th>
<td>JacORB
</td>
</tr>
<tr>
<th>Version</th>
<td>3.6
</td>
</tr>
<tr>
<th>Hardware</th>
<td>PC
</td>
</tr>
<tr>
<th>OS</th>
<td>All
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Severity</th>
<td>normal
</td>
</tr>
<tr>
<th>Priority</th>
<td>P5
</td>
</tr>
<tr>
<th>Component</th>
<td>ORB
</td>
</tr>
<tr>
<th>Assignee</th>
<td>jacorb-bugs@lists.spline.inf.fu-berlin.de
</td>
</tr>
<tr>
<th>Reporter</th>
<td>rhash@tibco.com
</td>
</tr></table>
<p>
<div>
<pre>In core/src/main/java/org/jacorb/orb/TaggedComponentList.removeComponents(),
there is bug that causes an ArrayIndexOutOfBounds to be thrown.
The TaggedComponent[] newComponents is sized smaller than 'components' if there
are any tags to be removed, however the for loop at the end is indexing into
both 'newComponents' and 'components' with the same index and it goes boom when
it walks off the end of 'newComponents'.
Reported against JacORB-3.6, but the code in 3.7 looks identical.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>
--1476912991.Eff41.12933--
--===============6537675607776238881==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
jacorb-bugs mailing list
[email protected]
https://lists.spline.inf.fu-berlin.de/mailman/listinfo/jacorb-bugs
--===============6537675607776238881==--