This is an automated email from the ASF dual-hosted git repository.

elharo pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/maven-dependency-analyzer.git


The following commit(s) were added to refs/heads/master by this push:
     new c2ca295  Handle corrupt constant pools (#242)
c2ca295 is described below

commit c2ca2952a1881da9a4d09cba466080f1b287bc04
Author: Elliotte Rusty Harold <elh...@users.noreply.github.com>
AuthorDate: Wed Jul 16 13:35:38 2025 +0000

    Handle corrupt constant pools (#242)
    
    * Handle corrupt constant pools
    * Introduce UnknownConstantPoolTypeException
---
 .../analyzer/asm/ConstantPoolParser.java           |  7 +++--
 .../analyzer/asm/DependencyClassFileVisitor.java   |  2 +-
 .../asm/UnknownConstantPoolTypeException.java      | 32 ++++++++++++++++++++++
 3 files changed, 37 insertions(+), 4 deletions(-)

diff --git 
a/src/main/java/org/apache/maven/shared/dependency/analyzer/asm/ConstantPoolParser.java
 
b/src/main/java/org/apache/maven/shared/dependency/analyzer/asm/ConstantPoolParser.java
index 1b9da80..208f41a 100644
--- 
a/src/main/java/org/apache/maven/shared/dependency/analyzer/asm/ConstantPoolParser.java
+++ 
b/src/main/java/org/apache/maven/shared/dependency/analyzer/asm/ConstantPoolParser.java
@@ -104,11 +104,12 @@ public class ConstantPoolParser {
 
     private static final int OX3F = 0x3F;
 
-    static Set<String> getConstantPoolClassReferences(byte[] b) {
+    static Set<String> getConstantPoolClassReferences(byte[] b) throws 
UnknownConstantPoolTypeException {
         return parseConstantPoolClassReferences(ByteBuffer.wrap(b));
     }
 
-    private static Set<String> parseConstantPoolClassReferences(ByteBuffer 
buf) {
+    private static Set<String> parseConstantPoolClassReferences(ByteBuffer buf)
+            throws UnknownConstantPoolTypeException {
         if (buf.order(ByteOrder.BIG_ENDIAN).getInt() != HEAD) {
             return Collections.emptySet();
         }
@@ -171,7 +172,7 @@ public class ConstantPoolParser {
                     consumePackage(buf);
                     break;
                 default:
-                    throw new RuntimeException("Unknown constant pool type '" 
+ tag + "'");
+                    throw new UnknownConstantPoolTypeException("Unknown 
constant pool type '" + tag + "'");
             }
         }
 
diff --git 
a/src/main/java/org/apache/maven/shared/dependency/analyzer/asm/DependencyClassFileVisitor.java
 
b/src/main/java/org/apache/maven/shared/dependency/analyzer/asm/DependencyClassFileVisitor.java
index 3d16943..f8930b8 100644
--- 
a/src/main/java/org/apache/maven/shared/dependency/analyzer/asm/DependencyClassFileVisitor.java
+++ 
b/src/main/java/org/apache/maven/shared/dependency/analyzer/asm/DependencyClassFileVisitor.java
@@ -95,7 +95,7 @@ public class DependencyClassFileVisitor implements 
ClassFileVisitor {
             // some bug inside ASM causes an IOB exception.
             // this happens when the class isn't valid.
             throw new VisitClassException("Unable to process: " + className, 
e);
-        } catch (IllegalArgumentException e) {
+        } catch (UnknownConstantPoolTypeException | IllegalArgumentException 
e) {
             throw new VisitClassException("Byte code of '" + className + "' is 
corrupt", e);
         }
     }
diff --git 
a/src/main/java/org/apache/maven/shared/dependency/analyzer/asm/UnknownConstantPoolTypeException.java
 
b/src/main/java/org/apache/maven/shared/dependency/analyzer/asm/UnknownConstantPoolTypeException.java
new file mode 100644
index 0000000..acc71c4
--- /dev/null
+++ 
b/src/main/java/org/apache/maven/shared/dependency/analyzer/asm/UnknownConstantPoolTypeException.java
@@ -0,0 +1,32 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+package org.apache.maven.shared.dependency.analyzer.asm;
+
+/**
+ * Exception thrown when an unknown constant pool type is encountered.
+ * This most likely indicates that a .class file is corrupt. There's
+ * also a small possibility that a newer version of Java has introduced
+ * a new constant type that this library does not yet support.
+ */
+class UnknownConstantPoolTypeException extends Exception {
+
+    UnknownConstantPoolTypeException(String message) {
+        super(message);
+    }
+}

Reply via email to