Uploaded image for project: 'WildFly Elytron'
  1. WildFly Elytron
  2. ELY-611

Unintentional integer overflow in LongNameSetPermissionCollection

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • 1.1.0.Beta8
    • 1.1.0.Beta7
    • None

      There are potentially overflowing expressions in org.wildfly.security.permission.LongNameSetPermissionCollection in getBitsForName method. Expressions 1 << nameEnumeration.size() and 1 << nameEnumeration.indexOf(name) are evaluated as integer but assigned to bits variable which is long. It can be avoided by casting 1 to long.

            dlloyd@redhat.com David Lloyd
            olukas Ondrej Lukas (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: