`RangeSet` deserializer fails for content `null`s with NPE

FasterXML / jackson-datatypes-collections

Jackson project that contains various collection-oriented datatype libraries: Eclipse Collections, Guava, HPPC, PCollections

Apache License 2.0

77 stars 52 forks source link

`RangeSet` deserializer fails for content `null`s with NPE #142

Closed cowtowncoder closed 9 months ago

cowtowncoder commented 9 months ago

(from https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65197)

Looks like RangeSet deserialization fails with non-Jackson exception (NPE?). We should instead fail with a DatabindException.

In future we may want to offer configurability for different behavior (automatic skipping, f.ex), and/or see that existing @JsonSetter configurability (annotation, config overrides) mechanisms work to avoid this issue.