Rei Odaira
Rei Odaira
To me, they all look like false positives, but please elaborate more on what specific scenarios could lead to vulnerabilities at those places, if you would like me to investigate...
@merlimat Sorry for the slow process. I'll include this to 1.6.0 once the review is done.
Sorry, I must release 1.6.0 as soon as possible, so let me push this off until 1.7.0.
I have not yet understood what was happening. Can I have the full thread dump at the time a deadlock happened?
Hi, I don't currently have a plan, but I am open to accept a PR. I am not 100% sure how to implement decompressing dependent blocks, but most likely it...
Though I personally don't have time to work on it as a first priority at this moment, I am quite open to accepting any contribution to support XXH3 in lz4-java.
Is your input data compressed by `LZ4CompressorWithLength`? `LZ4DecompressorWithLength` is supposed to be used for data compressed by `LZ4CompressorWithLength`, NOT by `LZ4Compressor`.
Hmm, I couldn't reproduce the problem with the following test, using lz4-java 1.7.0 on Java 8. I made these minor changes to your code: 1. I used `java.util.Base64`, but it...
Let me run it on Java 7 sometime this week.
I ran the following code with lz4-java-1.7.0.jar and commons-codec-1.14.jar on Java 7, but couldn't reproduce the problem. ``` import java.io.InputStream; import java.io.BufferedInputStream; import java.io.ByteArrayOutputStream; import java.io.IOException; import java.io.UnsupportedEncodingException; import org.apache.commons.codec.binary.Base64;...