Re: utf8 processing
"Remi Forax" (via asm Mailing List) <[email protected]> Sun, 9 May 2021 16:23:41 +0200 (CEST)
| Newsgroups | gmane.comp.java.objectweb.asm |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format... ------------=_1620570226-12468-4 Content-Type: multipart/alternative; boundary="=_c76fc286-7631-458c-98be-84ef46560f0a" --=_c76fc286-7631-458c-98be-84ef46560f0a Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Yes, it has been fixed 7 years ago.=20 [ https://gitlab.ow2.org/asm/asm/-/commit/3e0510cbc9612579f7774591876bd067c= 8dc02dc | https://gitlab.ow2.org/asm/asm/-/commit/3e0510cbc9612579f77745918= 76bd067c8dc02dc ]=20 R=C3=A9mi=20 > De: "asm" <[email protected]> > =C3=80: "Eugene Kuleshov" <[email protected]> > Cc: "asm" <[email protected]> > Envoy=C3=A9: Dimanche 9 Mai 2021 15:52:10 > Objet: Re: [asm] utf8 processing > Hi Eugene, > No it isn't. > See: > * [ > https://gitlab.ow2.org/asm/asm/-/blob/master/asm/src/main/java/org/object= web/asm/ByteVector.java#L246 > | > https://gitlab.ow2.org/asm/asm/-/blob/master/asm/src/main/java/org/object= web/asm/ByteVector.java#L246 > ] > * [ > https://gitlab.ow2.org/asm/asm/-/blob/master/asm/src/main/java/org/object= web/asm/ByteVector.java#L298 > | > https://gitlab.ow2.org/asm/asm/-/blob/master/asm/src/main/java/org/object= web/asm/ByteVector.java#L298 > ] > Strings that take up more than the maximum number of bytes will be reject= ed with > a "UTF8 string too large" exception. > x4e > =E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90 Original = Message =E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90 > On Sunday, May 9th, 2021 at 14:44, Eugene Kuleshov <[email protected]> wrote: >> I'm wondering if the issue with utf8 processing described in this blog s= till >> present? >> [ >> https://blog.polybdenum.com/2021/05/05/how-i-hacked-google-app-engine-an= atomy-of-a-java-bytecode-exploit.html >> | >> https://blog.polybdenum.com/2021/05/05/how-i-hacked-google-app-engine-an= atomy-of-a-java-bytecode-exploit.html >> ] --=_c76fc286-7631-458c-98be-84ef46560f0a Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <html><body><div style=3D"font-family: arial, helvetica, sans-serif; font-s= ize: 12pt; color: #000000"><div>Yes, it has been fixed 7 years ago.</div><d= iv><a href=3D"https://gitlab.ow2.org/asm/asm/-/commit/3e0510cbc9612579f7774= 591876bd067c8dc02dc">https://gitlab.ow2.org/asm/asm/-/commit/3e0510cbc96125= 79f7774591876bd067c8dc02dc</a><br data-mce-bogus=3D"1"></div><div><br data-= mce-bogus=3D"1"></div><div>R=C3=A9mi<br data-mce-bogus=3D"1"></div><div><br= ></div><hr id=3D"zwchr" data-marker=3D"__DIVIDER__"><div data-marker=3D"__H= EADERS__"><blockquote style=3D"border-left:2px solid #1010FF;margin-left:5p= x;padding-left:5px;color:#000;font-weight:normal;font-style:normal;text-dec= oration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>De:= </b>"asm" <[email protected]><br><b>=C3=80: </b>"Eugene Kuleshov" <ekul= [email protected]><br><b>Cc: </b>"asm" <[email protected]><br><b>Envoy=C3= =A9: </b>Dimanche 9 Mai 2021 15:52:10<br><b>Objet: </b>Re: [asm] utf8 proce= ssing<br></blockquote></div><div data-marker=3D"__QUOTED_TEXT__"><blockquot= e style=3D"border-left:2px solid #1010FF;margin-left:5px;padding-left:5px;c= olor:#000;font-weight:normal;font-style:normal;text-decoration:none;font-fa= mily:Helvetica,Arial,sans-serif;font-size:12pt;"><div>Hi Eugene,<br></div><= br><div>No it isn't.<br></div><br><div>See:<br></div><div> * <a href= =3D"https://gitlab.ow2.org/asm/asm/-/blob/master/asm/src/main/java/org/obje= ctweb/asm/ByteVector.java#L246" target=3D"_blank">https://gitlab.ow2.org/as= m/asm/-/blob/master/asm/src/main/java/org/objectweb/asm/ByteVector.java#L24= 6</a><br></div><div>* <a href=3D"https://gitlab.ow2.org/asm/asm/-/blob/mast= er/asm/src/main/java/org/objectweb/asm/ByteVector.java#L298" target=3D"_bla= nk">https://gitlab.ow2.org/asm/asm/-/blob/master/asm/src/main/java/org/obje= ctweb/asm/ByteVector.java#L298</a><br></div><br><div>Strings that take up m= ore than the maximum number of bytes will be rejected with a "UTF8 string t= oo large" exception.<br></div><br><div>x4e<br></div><div class=3D"protonmai= l_signature_block protonmail_signature_block-empty"><div class=3D"protonmai= l_signature_block-user protonmail_signature_block-empty"></div><div class= =3D"protonmail_signature_block-proton protonmail_signature_block-empty"></d= iv></div><br><div class=3D"protonmail_quote"><div>=E2=80=90=E2=80=90=E2=80= =90=E2=80=90=E2=80=90=E2=80=90=E2=80=90 Original Message =E2=80=90=E2=80=90= =E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90<br></div><div> On Sunday, May= 9th, 2021 at 14:44, Eugene Kuleshov <[email protected]> wrote:<br></div></= div><br><blockquote class=3D"protonmail_quote"> <div dir=3D"auto">I'm wondering if the issue with utf8 processi= ng described in this blog still present?<div dir=3D"auto"><br></div><div di= r=3D"auto"><a href=3D"https://blog.polybdenum.com/2021/05/05/how-i-hacked-g= oogle-app-engine-anatomy-of-a-java-bytecode-exploit.html" target=3D"_blank"= rel=3D"noreferrer nofollow noopener">https://blog.polybdenum.com/2021/05/0= 5/how-i-hacked-google-app-engine-anatomy-of-a-java-bytecode-exploit.html</a= ><br data-mce-bogus=3D"1"></div><div dir=3D"auto"><br></div><div dir=3D"aut= o"><br></div></div> </blockquote><br></blockquote></div></div></body></html>= --=_c76fc286-7631-458c-98be-84ef46560f0a-- ------------=_1620570226-12468-4 Content-Type: text/plain; charset="UTF-8" Content-Disposition: inline Content-Transfer-Encoding: 8bit -- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto:[email protected] For general help: mailto:[email protected]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws ------------=_1620570226-12468-4--