Re: [PR] reject negative UTF length in LongUTFDataInputStrea m.readLongUTF [poi-xmlbeans]

pjfanning commented on PR #93:
URL: https://github.com/apache/poi-xmlbeans/pull/93#issuecomment-5357522675

   Ok. I'll merge this. I'm not worried about hacked xsb files - if you can hack them, then you can hack classes.
   I still don't regard this as a big improvement in this lib and it fights against a basically non-existent problem.
   I don't care what the fuzzer is doing, it is generating garbage.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]