Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add failing test for #400 (yaml, char decoding) #401

Merged
merged 1 commit into from
Mar 8, 2023
Merged

Add failing test for #400 (yaml, char decoding) #401

merged 1 commit into from
Mar 8, 2023

Conversation

cowtowncoder
Copy link
Member

Reproduction of issue #400 found by OSS-Fuzz.

@cowtowncoder cowtowncoder self-assigned this Mar 8, 2023
@cowtowncoder
Copy link
Member Author

Hi @asomov ! I know this is quite an obscure thing, but may be worth handling. Issue found by OSS-Fuzz via Jackson YAML module. Let me know if you need more information (or if you'd like me to file an issue in snakeyaml bug tracker).

/cc @pjfanning

@cowtowncoder cowtowncoder linked an issue Mar 8, 2023 that may be closed by this pull request
IllegalArgumentException when attempting to decode invalid UTF-8 surrogate by SnakeYAML (oss-fuzz 50431) #400
Closed
@cowtowncoder cowtowncoder mentioned this pull request Mar 8, 2023
Closed
@cowtowncoder cowtowncoder merged commit 28e3b69 into 2.15 Mar 8, 2023
@cowtowncoder cowtowncoder deleted the tatu/400-yaml-iae-oss-fuzz-utf8 branch March 8, 2023 01:56
@asomov
Copy link
Contributor

asomov commented Mar 8, 2023 •
edited
Loading

@cowtowncoder feel free either to provide more info or file an issue in snakeyaml bug tracker
I did not quite catch what is the YAML which fails

Sorry ! I see the test. I will check it.

@cowtowncoder
Copy link
Member Author

@asomov Np, sorry I should have included reproduction input right here. Thank you for super-fast follow up!

@asomov
Copy link
Contributor

asomov commented Mar 18, 2023

@cowtowncoder fixed
https://bitbucket.org/snakeyaml/snakeyaml/issues/576

@cowtowncoder
Copy link
Member Author

Excellent. Thank you @asomov !

@asomov
Copy link
Contributor

asomov commented Mar 25, 2023

@cowtowncoder sorry, the issue tracker is temp closed because of the spam attack. But it is fixed and it will be delivered in version 2.1

@cowtowncoder
Copy link
Member Author

@asomov Sounds good -- looking forward to 2.1 release!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@cowtowncoder cowtowncoder

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

IllegalArgumentException when attempting to decode invalid UTF-8 surrogate by SnakeYAML (oss-fuzz 50431)
2 participants
@cowtowncoder @asomov