Re: utf8 processing

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
-----------------------a40690d8be9e82cd2122b65b3e963f30
Content-Type: multipart/mixed;boundary=---------------------abc70c15e45fa90c61703f1c69b90a8a

-----------------------abc70c15e45fa90c61703f1c69b90a8a
Content-Type: multipart/alternative;boundary=---------------------d802c2c09c15d21793f83de288b97466

-----------------------d802c2c09c15d21793f83de288b97466
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;charset=utf-8

Hi Eugene,

No it isn't.

See:
=C2=A0* https://gitlab.ow2.org/asm/asm/-/blob/master/asm/src/main/java/org=
/objectweb/asm/ByteVector.java#L246
* https://gitlab.ow2.org/asm/asm/-/blob/master/asm/src/main/java/org/objec=
tweb/asm/ByteVector.java#L298

Strings that take up more than the maximum number of bytes will be rejecte=
d with a "UTF8 string too large" exception.

x4e

=E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90 Original M=
essage =E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90
On Sunday, May 9th, 2021 at 14:44, Eugene Kuleshov <[email protected]> wrote:

> I'm wondering if the issue with utf8 processing described in this blog s=
till present?
> =


> https://blog.polybdenum.com/2021/05/05/how-i-hacked-google-app-engine-an=
atomy-of-a-java-bytecode-exploit.html
-----------------------d802c2c09c15d21793f83de288b97466
Content-Type: multipart/related;boundary=---------------------2edcf8572685223cd46a34f32010b9c7

-----------------------2edcf8572685223cd46a34f32010b9c7
Content-Type: text/html;charset=utf-8
Content-Transfer-Encoding: base64
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=
-----------------------2edcf8572685223cd46a34f32010b9c7--
-----------------------d802c2c09c15d21793f83de288b97466--
-----------------------abc70c15e45fa90c61703f1c69b90a8a
Content-Type: application/pgp-keys; filename="publickey - [email protected] - 0x155E3958.asc"; name="publickey - [email protected] - 0x155E3958.asc"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="publickey - [email protected] - 0x155E3958.asc"; name="publickey - [email protected] - 0x155E3958.asc"

LS0tLS1CRUdJTiBQR1AgUFVCTElDIEtFWSBCTE9DSy0tLS0tDQpWZXJzaW9uOiBPcGVuUEdQLmpz
IHY0LjEwLjEwDQpDb21tZW50OiBodHRwczovL29wZW5wZ3Bqcy5vcmcNCg0KeHNGTkJHQVhFVFVC
RUFDM3pSNEVkM2wwVGp5clpMZW9rNGh1TGltUWJqY1Y4cDdlSGNjM1BRRDNLSnF4DQpSazJhSllN
RWhORmdmQ2RMcW00RVRCQ0xiNFZtbUtRZ3lZT3lCczduYUpjMm0zdnU5a1JXUGZjZDMwS2ENCnlC
ZnJaWmlXQmxqbEVnMXVtSjBhWlByaVZ1VUo4bVJjcTdOZ0FHQVpGNE1XUk9kTytlbnJKVVJkQURZ
WA0KQ2pPZk9nSHAxNDg3ekhjU3NxODY1b2pwdHdaSVNPelozdCtXRTJka3R6cDBkeDIrek1jTFE1
cWc5QkRzDQovV1pLZW1rYlRRdVFCSjdENU10M3RTVGVmMU00VWpuK24zZTNMVnBTTnhQV1FpcVhN
VVpoR2hacFhvdzkNCkZZclo0TFZIeTlHVXBTVGtZZWZJSnlqanU0eEdBdHkzc0lQQTBSbm1jSjR1
QkVkZHZqKy9CbW1hUVpFUQ0KMlFMRENuaVZ6NzhwcllMVzNJTXlGNy9md1V1TlhTcXZYM2pYZUZr
V09TM214cDlESUNLZXlrbXAyUmtCDQorSnVhTU9rZWEzNTM3ZXFKbit1VHFJSVVyOHhpVGVKaUQw
MVMvYm9Scjc2ejFGdWdlU1dEN3ZUY0ErU3gNClJ4SjFmUjJKODA5YlFaaG1mYytVZnQrWVZyMngz
MDY0SS9VdnFDMHhabHNpajJlWFZDUXRhN1BSbXJiQQ0KWmI0cFl4d1VDTldGMWNoNWg4ZndscGVy
NUg5VS9VTFdqZHhpZm9GcVNFZzllQzRxczJ5SWkyNmt5SXRmDQp3RHZDelJCeEtOMDV1N3pOcTZT
QktGSFgvakMyaDlwOFlpbStnaTZhVDBCcnlTWFRyZFVYSXA4UDBsTGUNCmJEb2d5ekdiOU9vbk5W
ektyelZkcjVMQWJRRFgwdWtxQUptcll3QVJBUUFCelM5NE5HVmZlRFJsUUhCeQ0KYjNSdmJtMWhh
V3d1WTI5dElEeDROR1ZmZURSbFFIQnliM1J2Ym0xaGFXd3VZMjl0UHNMQmpRUVFBUWdBDQpJQVVD
WUNLaHdBWUxDUWNJQXdJRUZRZ0tBZ1FXQWdFQUFoa0JBaHNEQWg0QkFDRUpFSWtqR2FJbzJ5WHUN
CkZpRUVGVjQ1V0lSZVV0Ly8wdWJIaVNNWm9pamJKZTVtZ2hBQW5ESC81NXF3c25CTTBKeENOT0d3
NExULw0KcG5yc1dvWm9yWi80aUc4VFhnUk1Wa0FpWjFDT2VCR05IbWNDb0ZXRzlVY0xDeUkrT05Q
eTBNandzOHlxDQpnSm01QXUrVE9GVUpMTFJwT3A3VmdRbWNrZmswUkYvRE5Hak9hT0tZQUtKQlFv
dDhJcjY3VjFnSmhGcHMNCnNyQ2hpVmRYa1hiWFRVWkVEcnI3K1dYaWttQlFDcDFPZnNoL2ZhSkZN
K1ZtQXRvUENkMlVZV0hGalI4Sw0KMjg0aTM4bENaOXg2N0R4ZkVTR3gwQTFtTDlJTnNQcW0ydG1x
UFc0R0Ixbk1WYjlBTHRHMTEyVDhaQ2VSDQpDRHZYUlpaWDQ2MXN4bG1CT2xma293cGdia3dzbEFO
eVFIYk1IbXdZS3hoODJmRkdsalM4Umtoek9xSjENCm42NDFQNjJrS1kxOThPREJ6c1pRUmI2d1B5
TmZCWEhtMWtpd1RoYTM1Z1phS25jRkVtNEV4OFNxTXZOZg0KV0xTVUZHRXNIQVFHUjM3cUxPeDZZ
M3V4VlNadlZoZSt3ZVZWd1JnNDlzeGJiNVlSMHl0VTV5bFJqaXphDQpOVE5ES3BkM2lnTXFtMTRn
NmRYSDM1NnFFVm1uSG5ndGk4Qi9FaFZCZ1dwaDJCbjhkc2xjZlRaOUM4bm4NCk5DT2kvOTZRbHNl
M216ZGU1cWNNdlRwRVp0cm9IV1QvNUxYK0Q2VDRXamZLQ2NlcDEzSnRMbHVsWGxpVw0KR3dYVHht
T0Uzb1VaS2dhQWtsbnArcWsvZndtZEtDblNySUVLK1ZjeDZVMEdvaWFHTnFXZGtnbjBiOERxDQpB
NUZaYitBWUZMVVZYVzNOdTdoWEFPdnJnSS9DZTZuZWFiR0UySTBVd3Z6bldWaFdEZjBjdDlxbDJR
Yk8NCndVMEVZQmNSTlFFUUFNdUdTQXdrcmRLVUVKQWlWZW9mV3FzQ0hEa1diT0luMVBiTytCWlk3
alRjdmFkVw0KVEhzU2kyTmJyd0lGRU1TSE1iaXVFelZkM0tBbVpMckduK1d3T0VLeHdNOXd2SG5T
Z2NkbmRIbmcyTHJxDQp0Y200cm9lZTRmYXNqUjVHczM4Q1FlMlhyaHVxVmFJbnl0UFlHTW1ub085
V3hGdGxERjNwQzBkajJZZUINCk5XTGdKclFhT3l3UlFvMXlMazJsRVJYaEFNWWI0eENSampPZHF4
c3IxOFl2MGJEWTRoUmoxRDNhTnpCRA0KK2kwdDZ2Z2QxSlhleG1TUXE5bnEvSEFNVjA4aHpROFh5
ZTN5bzN3NnMzSGFrNFAyUTZidHFCR2tRbjE1DQo3VnByVi9OUkpXdUcwem5VU2VQV09CNWpMdy9x
dXI2ekxvTXVVZWlZNXZBbmJSK1htQ0oxZUdNTFdSa0gNCi9NSTk1QTA0cTBpeU9DUGEveFZhQ2Nj
bUlLYXlhajlqcm5RRURKQjlZSDRxZStxWkI0TzRjcGdseWl0OA0KUFdoZ2R4b3BOc1p4ampTWE1G
aXRuR1Nka3hvQkdXRmxTdlFIQ054MGtJV2QwZkZsVWFqeEVCeHl1b1p5DQpJQzV3RHlOanpyOEhF
cm5vMlVSenhkS0dRMnhGNXlFd2djOGJsbFZ5a0FudGdjM3YvVnRMZFk0cCtRaUwNClYxd3NJZVJQ
YkFmdE4xRmxRQjI5bm9GaldvcllFRE0xRHpjbEVPVldiRjQzTGp4d29pKzFybjJISGlEVQ0KMUEr
MzRUTVpEdnBkSjZxYTVmVzZ2TWVPa2c3WFpySTRLU2VRL1JCaVdyamdyMEFCc1ZZWDZmcXo1ZVNO
DQpuaUhzL3VNQkRuRTh3ZnU5dWEwTHF3Q013MWNETVlSc0owcExBQkVCQUFIQ3dYWUVHQUVJQUFr
RkFtQWkNCm9jQUNHd3dBSVFrUWlTTVpvaWpiSmU0V0lRUVZYamxZaEY1UzMvL1M1c2VKSXhtaUtO
c2w3amRBRC9zRw0KMkNucnlwTmFGNnVydDI1OHo1UFNDNXR5bU5wUzVZOXJqVEZlYXJZWEZZNUJw
ak9zWEM1SzJlcDEwOWZUDQpQczd2STN5Tm4yL0JibllFbmV5ajRmRTZ3UDhSS09BdGhmVGZhdkhT
N2xGY1JFYlB1U2ZYelpSNi9EZU4NCk5aQzdQSmVsVXpuL3QybGdmeE0zVWRIOFRadmRaU0FZanVV
UmdLTE85Q04yK0xOWEM1WWk5UElkS0lHKw0KUzUwRWdoSWRkMndZVWgyeVVVenc5ZEs4ajVZU3hi
Wktyd1ZmdGxBYVJqbzZOOWc5bmU4STcyaGx0LzdWDQpoUll3VFBnV0pvczVFOG1lQW9rdlhTclpw
UnUvZDd0cmlYZUtNVUhhbDhvY1hSR2w2K0xRQ3pTR0ZrMmYNCm1ycE12OE9mMHVCRXdxZmxWQUZx
eUZJazFiNFFoaDNKUmZacDdiMmNXbjlhQ0FNbDBKcXc4dHVEa040dA0KbFZUUmFqUmx1cldIRWto
T3JEN3Q5dnRncVEyRVBBS0s3UUc1QkNoaHlUb2RsNWNWckxsbi9rOWdGNWp6DQp1QjFIaytMVFRk
YTFSU3BJcUpQRXEwZU1lK1dTRWp1ais5VkgxbzNQUEZ3RWI1UDdSS3NxemtpcDVBY1cNCjZ5Tjc2
czZvQmZWOXVhQ2YwM3pjdHZqUXpIMFZhRmVRTFRQWDNlT2FpMklkbldDMTdGMmdKbGVyTDNDNQ0K
T0dscjhDN2xQODUraEoxMVhsOXhBZWZ4QzRIYk11WmtuU2RnUzNyUWNmSVZFbzliak1RalQ5WmY1
WXVsDQpxcVV3NytKSTQwdWFmYVVpLzcxUDRVUTgreENCVUN3akFIK2hBVzdocTFyTjBJMmdNZlZ6
S2R5Z0FPTFcNCjNONkdBUHFGNUdROW8welJNTzExZWc9PQ0KPXZPdWoNCi0tLS0tRU5EIFBHUCBQ
VUJMSUMgS0VZIEJMT0NLLS0tLS0NCg==
-----------------------abc70c15e45fa90c61703f1c69b90a8a--

-----------------------a40690d8be9e82cd2122b65b3e963f30
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: ProtonMail
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=40kZ
-----END PGP SIGNATURE-----


-----------------------a40690d8be9e82cd2122b65b3e963f30--