Skip to content

decodeFromByteArray(length) doesn't validate its length argument #71

Description

@devcrocod

decodeFromByteArray takes a length parameter with no check that it's within the bounds of the provided array, matching the same class of bug as the native/JNI parse(data, length) calls elsewhere in the codebase.

Needs a bounds check on the length argument.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingseverity: lowLow severity

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions