Skip to content

Another uncaught exception in CBORParser._nextChunkedByte2 (by ossfuzzer) #273

@cowtowncoder

Description

@cowtowncoder

(note: similar to #272 reported by ossfuzz as 32912, see https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32912)

Looks like there is a problem in handling of chunked text, wherein truncated multi-byte UTF-8 code point at the end of chunk is not detected, leading to overrun (and potential ArrayIndexOutOfBoundsException).

Note that the problem is truncated UTF-8 character and not handling of adjacent chunks: as per CBOR specification, a single UTF-8 unit is NOT allowed to be split across chunks but has to align.

Metadata

Metadata

Assignees

No one assigned

    Labels

    fuzzIssue found by OssFuzz

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions