[LUCENE-4074] FST Sorter BufferSize causes int overflow if BufferSize > 2048MB

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.6, 4.0-ALPHA
• Fix Version/s: 4.0-ALPHA, 3.6.1
• Component/s: modules/spellchecker
• Lucene Fields: New, Patch Available
• Assignee: Simon Willnauer
• Reporter: Simon Willnauer
• Created: 23/May/12 15:53
• Updated: 28/Aug/22 13:17
• Resolved: 23/May/12 19:49

Description

the BufferSize constructor accepts size in MB as an integer and uses multiplication to convert to bytes. While its checking the size in bytes to be less than 2048 MB it does that after byte conversion. If you pass a value > 2047 to the ctor the value overflows since all constants and methods based on MB expect 32 bit signed ints. This does not even result in an exception until the BufferSize is actually passed to the sorter.