Update Woodstox to 6.2.5, resolved #463 and #465

FasterXML · Apr 5, 2021 · 5bceeb2 · 5bceeb2
1 parent c577dc0
commit 5bceeb2
Show file tree

Hide file tree

Showing 5 changed files with 15 additions and 3 deletions.
diff --git a/pom.xml b/pom.xml
@@ -86,7 +86,7 @@ alternative support for serializing POJOs as XML and deserializing XML as pojos.
     <dependency>
       <groupId>com.fasterxml.woodstox</groupId>
       <artifactId>woodstox-core</artifactId>
-      <version>6.2.4</version>
+      <version>6.2.5</version>
       <exclusions>
         <exclusion>
 	  <groupId>javax.xml.stream</groupId>

diff --git a/release-notes/CREDITS-2.x b/release-notes/CREDITS-2.x
@@ -155,3 +155,11 @@ Westin Miller (westinrm@github)
 
 * Contributed #456: Fix JsonAlias with unwrapped lists
  (2.12.3)
+
+Fabian Meumertzheim (fmeum@github)
+
+* Reported #463: NPE via boundary condition, document with only XML declaration
+ (2.13.0)
+* Reported #465: ArrayIndexOutOfBoundsException in UTF8Reader (ossfuzz)
+ (2.13.0)
+
diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x
@@ -10,6 +10,10 @@ Project: jackson-dataformat-xml
  (reported by richardsonwk@github)
 #462: Remove `jackson-module-jaxb-annotations` runtime dependency (leave
   as a test dep)
+#463: NPE via boundary condition, document with only XML declaration
+ (reported by Fabian M)
+#465: ArrayIndexOutOfBoundsException in UTF8Reader (ossfuzz)
+ (reported by Fabian M)
 
 2.12.3 (not yet released)
 

diff --git a/...ml/failing/Fuzz463_32872_XmlDeclTest.java → ...t/xml/fuzz/Fuzz463_32872_XmlDeclTest.java b/...ml/failing/Fuzz463_32872_XmlDeclTest.java → ...t/xml/fuzz/Fuzz463_32872_XmlDeclTest.java
@@ -1,4 +1,4 @@
-package com.fasterxml.jackson.dataformat.xml.failing;
+package com.fasterxml.jackson.dataformat.xml.fuzz;
 
 import java.nio.charset.StandardCharsets;
 

diff --git a/.../failing/Fuzz465_32906_CDataReadTest.java → ...xml/fuzz/Fuzz465_32906_CDataReadTest.java b/.../failing/Fuzz465_32906_CDataReadTest.java → ...xml/fuzz/Fuzz465_32906_CDataReadTest.java
@@ -1,4 +1,4 @@
-package com.fasterxml.jackson.dataformat.xml.failing;
+package com.fasterxml.jackson.dataformat.xml.fuzz;
 
 import com.fasterxml.jackson.core.exc.StreamReadException;
 import com.fasterxml.jackson.databind.JsonNode;