[commons-bcel] 03/03: org.apache.bcel.classfile.ExceptionTable constructors now throw ClassFormatException on invalid input

[ggregory]

This is an automated email from the ASF dual-hosted git repository.

ggregory pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-bcel.git

commit 36cf651dbf9670127c36ae926818c4ce9ac03902
Author: Gary David Gregory (Code signing key) <ggreg...@apache.org>
AuthorDate: Mon Nov 21 13:24:50 2022 -0500

    org.apache.bcel.classfile.ExceptionTable constructors now throw
    ClassFormatException on invalid input
---
 src/changes/changes.xml                                     | 3 ++-
 src/main/java/org/apache/bcel/classfile/ExceptionTable.java | 2 ++
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index fec3a5f9..dde59cbb 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -99,7 +99,8 @@ The <action> type attribute can be add,update,fix,remove.
       <action                  type="fix" dev="markt" 
due-to="OSS-Fuzz">org.apache.bcel.classfile.StackMapType constructors now throw 
ClassFormatException on invalid input.</action>
       <action                  type="fix" dev="ggregory" due-to="nbauma109, 
Gary Gregory">Code coverage and bug fixes for bcelifier #171.</action>
       <action                  type="fix" dev="markt" due-to="Mark Thomas, 
Gary Gregory">org.apache.bcel.classfile.Attribute constructors now throw 
ClassFormatException on invalid length input.</action>
-      <action                  type="fix" dev="ggregory" due-to="Gary 
Gregory">org.apache.bcel.classfile.CodeException constructors now throw 
ClassFormatException on invalid input.</action>      
+      <action                  type="fix" dev="ggregory" due-to="Gary 
Gregory">org.apache.bcel.classfile.CodeException constructors now throw 
ClassFormatException on invalid input.</action>
+      <action                  type="fix" dev="ggregory" due-to="Gary 
Gregory">org.apache.bcel.classfile.ExceptionTable constructors now throw 
ClassFormatException on invalid input.</action>
       <!-- UPDATE -->
       <action                  type="update" dev="ggregory" due-to="Gary 
Gregory">Bump spotbugs-maven-plugin from 4.7.2.2 to 4.7.3.0 #167.</action>
       <action                  type="update" dev="ggregory" 
due-to="Dependabot">Bump jmh.version from 1.35 to 1.36 #170.</action>
diff --git a/src/main/java/org/apache/bcel/classfile/ExceptionTable.java 
b/src/main/java/org/apache/bcel/classfile/ExceptionTable.java
index 7b914e92..82d7fec1 100644
--- a/src/main/java/org/apache/bcel/classfile/ExceptionTable.java
+++ b/src/main/java/org/apache/bcel/classfile/ExceptionTable.java
@@ -23,6 +23,7 @@ import java.io.IOException;
 import java.util.Arrays;
 
 import org.apache.bcel.Const;
+import org.apache.bcel.util.Args;
 import org.apache.commons.lang3.ArrayUtils;
 
 /**
@@ -80,6 +81,7 @@ public final class ExceptionTable extends Attribute {
     public ExceptionTable(final int nameIndex, final int length, final int[] 
exceptionIndexTable, final ConstantPool constantPool) {
         super(Const.ATTR_EXCEPTIONS, nameIndex, length, constantPool);
         this.exceptionIndexTable = exceptionIndexTable != null ? 
exceptionIndexTable : ArrayUtils.EMPTY_INT_ARRAY;
+        Args.requireU2(this.exceptionIndexTable.length, 
"exceptionIndexTable.length");
     }
 
     /**