[XMLBEANS-487] Entity replacement in wrong place when expansion coincides with buffer growth

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Version 2.6
• Fix Version/s: Version 5.0.1
• Component/s: XmlObject
• Assignee: Andreas Beeker
• Reporter: Jesper Steen Møller
• Created: 06/Sep/12 16:13
• Updated: 11/Jul/21 22:06
• Resolved: 28/Jun/21 21:29

Description

When serializing an object to XML using newReader(), some of the entity replacements for '&' appear in the wrong places, giving invalid XML.

Example:
<a q='aaaaaaaaaaaaaaaaa'><t>Hall & Oates</t></a>
could be serialized as:
<a q='aaaaaaaa&aaaaaaaa'><t>Hall & Oates</t></a>

The bug depends on the sequence of the read()-calls, the size of the requested buffer, and the content. We're using the newReader to feed a Xalan transformation, and in some tens of millions different transformations, this has happened just a few times – but this time, we've isolated the problem, which is attached as a stand-alone test case.