Closed polivar3 closed 4 years ago
For the record, CI is failing because Travis is now using JDK 11, which Avian's build system has trouble with. Not sure how much work would be required to fix that. Not a blocker for this PR, anyway.
Thanks, @polivar3!
Thanks to you @dicej
This patch will fix the following security issues in arrayCopy: -Two integer overflows resulting in out-of-bounds read/write (CVE-2020-17360). -A silent return when negative lengths are provided. This could result in data being lost during the copy, with varying consequences depending on the subsequent use of the destination buffer (CVE-2020-17361).