Closed
Description
sshj.sftp.RemoteFile.ReadAheadRemoteFileInputStream.read() leads to data overwrites and/or ArrayIndexOutOfBoundsException when len < res.recvLen.
The problem does not occur with regular read() because there, the size of the response is limited by the len argument.
With read ahead, the size of the response is bounded by a previous len argument.
This bug is not trivial to fix, because it relies on the RemoteFile.checkReadResponse swiss army knife, so there is no easy way to buffer partially evaluated response packets.
Metadata
Metadata
Assignees
Labels
No labels