Uploaded image for project: 'WildFly Elytron'
  1. WildFly Elytron
  2. ELY-611

Unintentional integer overflow in LongNameSetPermissionCollection

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • 1.1.0.Beta8
    • 1.1.0.Beta7
    • None

      There are potentially overflowing expressions in org.wildfly.security.permission.LongNameSetPermissionCollection in getBitsForName method. Expressions 1 << nameEnumeration.size() and 1 << nameEnumeration.indexOf(name) are evaluated as integer but assigned to bits variable which is long. It can be avoided by casting 1 to long.

              dlloyd@redhat.com David Lloyd
              olukas Ondrej Lukas (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: