[LUCENE-6409] LongBitSet.ensureCapacity overflows on numBits > Integer.MaxValue

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 5.2, 6.0
• Component/s: core/other
• Lucene Fields: New, Patch Available
• Assignee: Unassigned
• Reporter: Luc Vanlerberghe
• Created: 08/Apr/15 14:17
• Updated: 09/May/16 18:37
• Resolved: 13/Apr/15 07:19

Description

LongBitSet.ensureCapacity calculates the number of longs required to store the number of bits correctly and allocates a long[] accordingly, but then shifts the array length (which is an int!) left by 6 bits. The int should be cast to long before performing the shift.