Uploaded image for project: 'Jackrabbit Oak'
  1. Jackrabbit Oak
  2. OAK-10777

oak-lucene: add test coverage for stack overflow based on very long and complex regexp using JCR lucene native query

    XMLWordPrintableJSON

Details

    • Task
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 1.64.0
    • lucene

    Description

      This is like OAK-10713, but using a JCR query, proving that the vulnerability can be triggered over JCR.

      Attachments

        Issue Links

          is related to

          Task - A task that needs to be done. OAK-10713 oak-lucene: add test coverage for stack overflow based on very long and complex regexp

          • Major - Major loss of function.
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. OAK-10719 oak-lucene uses Lucene version that can throw a StackOverflowException

          • Major - Major loss of function.
          • In Progress
          links to

          Web Link GitHub Pull Request #1434

          Activity

            People

              reschke Julian Reschke
              reschke Julian Reschke
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: