Skip to content

IonReader.newBytes() throwing NegativeArraySizeException #469

@cowtowncoder

Description

@cowtowncoder

OSS-Fuzz reported a problem with stack trace of:

== Java Exception: java.lang.NegativeArraySizeException: -81
	 at com.amazon.ion.impl.IonReaderContinuableCoreBinary.newBytes(IonReaderContinuableCoreBinary.java:565)
	 at com.fasterxml.jackson.dataformat.ion.IonParser.getEmbeddedObject(IonParser.java:592)
	 at com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer._fromEmbedded(JsonNodeDeserializer.java:836)
	 at com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer._deserializeRareScalar(JsonNodeDeserializer.java:697)
	 at com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer._deserializeContainerNoRecursion(JsonNodeDeserializer.java:645)
	 at com.fasterxml.jackson.databind.deser.std.JsonNodeDeserializer.deserialize(JsonNodeDeserializer.java:104)
	 at com.fasterxml.jackson.databind.deser.std.JsonNodeDeserializer.deserialize(JsonNodeDeserializer.java:25)
	 at com.fasterxml.jackson.databind.deser.DefaultDeserializationContext.readRootValue(DefaultDeserializationContext.java:342)
	 at com.fasterxml.jackson.databind.ObjectMapper._readValue(ObjectMapper.java:4876)
	 at com.fasterxml.jackson.databind.ObjectMapper.readTree(ObjectMapper.java:3145)

with specifically generated corrupt Ion document.

Metadata

Metadata

Assignees

No one assigned

    Labels

    2.17fuzzIssue found by OssFuzzion

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions