[jira] [Commented] (XERCESC-2217) ICUTranscoder::transcodeFrom buffer overflow

    [ https://issues.apache.org/jira/browse/XERCESC-2217?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17613006#comment-17613006 ] 

Scott Cantor commented on XERCESC-2217:
---------------------------------------

Roger LeighI believe this was applied, so can be resolved?

> ICUTranscoder::transcodeFrom buffer overflow
> --------------------------------------------
>
>                 Key: XERCESC-2217
>                 URL: https://issues.apache.org/jira/browse/XERCESC-2217
>             Project: Xerces-C++
>          Issue Type: Bug
>    Affects Versions: 3.2.3
>            Reporter: Roger Leigh
>            Assignee: Roger Leigh
>            Priority: Major
>             Fix For: 4.0.0, 3.2.4
>
>
> See https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35373
> When charsDecoded == 0, the line for (index = 0; index < charsDecoded - 1; index++) will cause to read out of bounds of fSrcOffsets, due to unsigned integer underflow rules.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)