https://bz.apache.org/bugzilla/show_bug.cgi?id=68335

Dominik Stadler <dominik.stad...@gmx.at> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEEDINFO                    |RESOLVED
         Resolution|---                         |WORKSFORME

--- Comment #7 from Dominik Stadler <dominik.stad...@gmx.at> ---
Apache POI does not try to handle broken documents without throwing exceptions.

It tries to not allocate endless amounts of memory and not run into endless
loops/stackoverflow-exceptions. 

Therefore in this case it seems fine to get this type of exception when the
input data is actually a document produced by a fuzzer. 

See
https://github.com/google/oss-fuzz/tree/master/projects/apache-poi/src/main/java/org/apache/poi
for some fuzz-targets and which exceptions they currently handle "gracefully".

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org
For additional commands, e-mail: dev-h...@poi.apache.org

Reply via email to