/[Apache-SVN]
ViewVC logotype

Revision 1919342


Jump to revision: Previous Next
Author: centic
Date: Thu Jul 18 07:09:32 2024 UTC (3 months, 2 weeks ago)
Changed paths: 6
Log Message:
Bug 66425: Avoid exceptions found via poi-fuzz

Processing formats uses regular expressions. Very complex formats
can recurse very deeply and thus can cause StackOVerflows depending
on the used stack-size.

In order to handle this a bit more gracefully, we now catch this
and report a better exception with details about the parsed 
format and potential mitigation.

Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66137

Changed paths

Path Details
Directorypoi/trunk/poi/src/main/java/org/apache/poi/ss/format/CellFormat.java modified , text changed
Directorypoi/trunk/poi/src/test/java/org/apache/poi/hssf/extractor/TestExcelExtractor.java modified , text changed
Directorypoi/trunk/poi-integration/src/test/java/org/apache/poi/stress/TestAllFiles.java modified , text changed
Directorypoi/trunk/poi-scratchpad/src/test/java/org/apache/poi/hssf/converter/TestExcelConverterSuite.java modified , text changed
Directorypoi/trunk/test-data/spreadsheet/clusterfuzz-testcase-minimized-POIHSSFFuzzer-4657005060816896.xls added
Directorypoi/trunk/test-data/spreadsheet/stress.xls modified , text changed

infrastructure at apache.org
ViewVC Help
Powered by ViewVC 1.1.26