[MYFACES-3476] New CDATA fast filter throws Exception

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.0.12
• Fix Version/s: 2.0.13, 2.1.7
• Component/s: JSR-314
• Environment: MyFaces 2.0.12, Richfaces 4.1.0.Final, Tomcat 6, Linux
• Assignee: Leonardo Uribe
• Reporter: James G
• Created: 24/Feb/12 20:22
• Updated: 03/Apr/12 18:39
• Resolved: 25/Feb/12 16:39

Description

When the filter (CDataEndEscapeFilterWriter) parses 2 CDATA End tags, it passes an incorrect length to the writer throwing an exception further down the stack. The incorrect length comes from the method write(char[] cbuf, int off, int len). On the second match of the end tag the (offset+length) passed to the super.write can be greater than the (offset+length) passed to the method. Suggested fix:
change index = i+1; to index = off+i+1; and
change super.write(cbuf, index, i+1);
to super.write(cbuf, index, i+1 - ( index - off ) );

Issue Links

• relates to: MYFACES-3449 [perf] replace buffer in PartialResponseWriter implementation with a fast filter