victims / victims-lib-java

The victims library containing the hashing logic for java specific artifacts.
GNU Affero General Public License v3.0
5 stars 8 forks source link

Normalization bug in processing of the iinc opcode #37

Open fweimer opened 10 years ago

fweimer commented 10 years ago

The wide flag is not reset after processing a wide iinc opcode. Depending on the remaining bytecode, this can cause the bytecode parser to desynchronize and result in exceptions. Fortunately, wide iinc instructions are relatively rare, but some classes will change their normalization if this bug is fixed.

OndraZizka commented 8 years ago

What code is this related to?

fweimer commented 8 years ago

The formatBytecode method in com.redhat.victims.fingerprint.ClassFile.