[LUCENE-8174] ArrayIndexOutOfBoundsException in IntRange.toString and its siblings

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 7.2
• Fix Version/s: 7.3, 8.0
• Component/s: core/index
• Lucene Fields: New
• Assignee: Unassigned
• Reporter: Oliver Kaleske
• Created: 14/Feb/18 14:55
• Updated: 28/Aug/22 15:25
• Resolved: 15/Feb/18 14:24

Description

The following code produces an ArrayIndexOutOfBoundsException:

        IntRange intRange = new IntRange("foo", new int[] { 1 }, new int[] { 2 });
        System.out.println(intRange.toString());

The exception is thrown in NumericUtils.sortableBytesToInt, which is fed an incorrect offset.

The bug appears to be in IntRange.toString. I guess the for loop should read

for (int d=0; d<type.pointDimensionCount()/2; ++d)

instead of

for (int d=1; d<type.pointDimensionCount(); ++d)

because the number of dimensions is half the number of "point dimensions" (cf. the checks on the dimension parameter in getMin() and getMax()).

The same bug is found in the DoubleRange, FloatRange, and LongRange classes.