<html>
<head>
<base href="http://www.jacorb.org/bugzilla/" />
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - org.jacorb.orb.TaggedComponentList.removeComponents() generates ArrayIndexOutOfBounds"
href="http://www.jacorb.org/bugzilla/show_bug.cgi?id=1090">1090</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>org.jacorb.orb.TaggedComponentList.removeComponents() generates ArrayIndexOutOfBounds
</td>
</tr>
<tr>
<th>Product</th>
<td>JacORB
</td>
</tr>
<tr>
<th>Version</th>
<td>3.6
</td>
</tr>
<tr>
<th>Hardware</th>
<td>PC
</td>
</tr>
<tr>
<th>OS</th>
<td>All
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Severity</th>
<td>normal
</td>
</tr>
<tr>
<th>Priority</th>
<td>P5
</td>
</tr>
<tr>
<th>Component</th>
<td>ORB
</td>
</tr>
<tr>
<th>Assignee</th>
<td>jacorb-bugs@lists.spline.inf.fu-berlin.de
</td>
</tr>
<tr>
<th>Reporter</th>
<td>rhash@tibco.com
</td>
</tr></table>
<p>
<div>
<pre>In core/src/main/java/org/jacorb/orb/TaggedComponentList.removeComponents(),
there is bug that causes an ArrayIndexOutOfBounds to be thrown.
The TaggedComponent[] newComponents is sized smaller than 'components' if there
are any tags to be removed, however the for loop at the end is indexing into
both 'newComponents' and 'components' with the same index and it goes boom when
it walks off the end of 'newComponents'.
Reported against JacORB-3.6, but the code in 3.7 looks identical.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>