FasterXML / jackson-dataformats-binary

Uber-project for standard Jackson binary format backends: avro, cbor, ion, protobuf, smile
Apache License 2.0
310 stars 133 forks source link

Uncaught exception in `CBORParser._findDecodedFromSymbols()` #288

Closed cowtowncoder closed 3 years ago

cowtowncoder commented 3 years ago

(note: original report at https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35750)

Looks like non-canonical length definition (using long form for length of 0) will result in an exception; needs to be checked.

A related question would be whether there should be "strict" decoding mode as this is violation of canonical form. But first thing first, handle this case gracefully.