DO NOT REPLY [Bug 14915] New: - XMLGrammarPoolImpl.retrieveInitialGrammarSet array index bug in 2.2.1

[bu...@apache.org]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=14915>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=14915

XMLGrammarPoolImpl.retrieveInitialGrammarSet array index bug in 2.2.1

           Summary: XMLGrammarPoolImpl.retrieveInitialGrammarSet array index
                    bug in 2.2.1
           Product: Xerces2-J
           Version: 2.2.0
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: Other
        AssignedTo: xerces-j-dev@xml.apache.org
        ReportedBy: m_sample@canada.com


Xerces-J 2.2.1:
org.apache.xerces.util.XMLGrammarPoolImpl.retrieveInitialGrammarSet method will 
throw an ArrayIndexOutOfBoundsException when there are more entries in the 
fGrammars table (via chaining) of the requested grammarType than "TABLE_SIZE" 
(11).

This bug report is based on code inspection - the bug has not actually been 
generated by me (i.e. take this with a grain of salt).  It stems from the fact 
that the fGrammars array is used as hash buckets, from which entries are 
chained, thus there may be more entries of a given grammarType 
than "fGrammars.length" which is used for the size of the temp array to hold 
the return value.

---------------------------------------------------------------------
To unsubscribe, e-mail: xerces-j-dev-unsubscribe@xml.apache.org
For additional commands, e-mail: xerces-j-dev-help@xml.apache.org