-
Notifications
You must be signed in to change notification settings - Fork 129
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
BCEL-363 Enforce MAX_CP_ENTRIES in ConstantPoolGen and ConstantPool.dump #147
BCEL-363 Enforce MAX_CP_ENTRIES in ConstantPoolGen and ConstantPool.dump #147
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hello @rjatkins
Thank you for your PR.
You'll need to add tests to this PR, otherwise, this will be a regression waiting to happen.
I've added the requested test coverage. Let me know if you need further changes |
@rjatkins merged, ty for your PR! |
@garydgregory is there any chance of a release with this fix in it soon? I'd like to use it to patch xalan, and I'd rather not have to release a patched version of BCEL to do it. |
@rjatkins |
Fixes #192. See GHSA-97xg-phpr-rg8q. See https://issues.apache.org/jira/browse/BCEL-363. See apache/commons-bcel#147. Signed-off-by: Alexander Kriegisch <Alexander@Kriegisch.name>
Fixes #192. See GHSA-97xg-phpr-rg8q. See https://issues.apache.org/jira/browse/BCEL-363. See apache/commons-bcel#147. Signed-off-by: Alexander Kriegisch <Alexander@Kriegisch.name>
Reapplies the fix in openjdk/jdk11u@13bf52c but using the Const constant for the constant pool size limit.