[OFBIZ-6522] Potential IndexOutOfBoundsException in CategoryServices.getProductCategoryAndLimitedMembers

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 16.11.01
• Fix Version/s: 15.12.01
• Component/s: product
• Sprint: Community Day 2 - 2015
• Assignee: Michael Brohl
• Reporter: Martin Becker
• Created: 20/Jun/15 17:07
• Updated: 18/Jun/16 22:19
• Resolved: 21/Jun/15 16:33

Description

If view indexes as input parameters of service getProductCategoryAndLimitedMembers get manipulated (e.g. by manipulating URL params or bookmarking an URL with those params an come back later), it can lead to an IndexOutOfBoundsException because of a lowIndex greater list size. The highIndex is checked for that, the lowIndex is not.