Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-4434319

Removing beyond length of document can cause element structure to become bogus

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: P4 P4
    • 1.4.0
    • 1.4.0
    • client-libs
    • None
    • beta2
    • sparc
    • solaris_7

      AbstractDocument.remove does not verify the arguments passed in. As such, it will invoke removeUpdate with bogus values. ElementBuffer will then update the elements in response to bogus arguments. Content will throw an exception so that the content isn't removed, but the Element structure will have changed in anticipation of the removal and thus become out of sync with the content.

            svioletsunw Scott Violet (Inactive)
            svioletsunw Scott Violet (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: