[JEXL-131] UnifiedJexl (2.1.x) / Jxlt (3.0) parsing may fail with NPE

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1
• Fix Version/s: 2.1.2, 3.0
• Assignee: Henri Biestro
• Reporter: Henri Biestro
• Created: 30/Apr/12 21:53
• Updated: 21/Mar/16 14:10
• Resolved: 01/May/12 20:26

Description

From Clay Bruce email:
the offending code is the method startsWith which can be found at line 1345 in UnifiedJEXL.java.
Problem is that sequence is not tested to see if the index is available before trying to access it.

A source with lines starting with leading spaces will trigger the bug.