FasterXML / jackson-dataformats-binary

Uber-project for standard Jackson binary format backends: avro, cbor, ion, protobuf, smile
Apache License 2.0
310 stars 133 forks source link

`IonReader.next()` throws NPEs for some invalid content #437

Closed cowtowncoder closed 9 months ago

cowtowncoder commented 9 months ago

(note: issue found by OSS-Fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65452)

Looks like IonReader.next() leaks NullPointerExceptions (in addition to index-out-of-bounds and AssertionErrors), so it will be necessary to catch and re-throw those as well.