Bug trophy case

This is a list of new bugs found in open-source software using JQF. Feel free to add to this list if you find anything new using JQF.

OpenJDK

JDK-8190332: PngReader throws NegativeArraySizeException when width is too large
JDK-8190511: PngReader throws OutOfMemoryError for very small malformed PNGs
JDK-8190512: PngReader throws undocumented IllegalArgumentException: "Empty Region" instead of IOException for malformed images with negative dimensions
JDK-8190997: PngReader throws NullPointerException when PLTE section is missing
JDK-8191023: PngReader throws NegativeArraySizeException in parse_tEXt_chunk when keyword length exceeeds chunk size
JDK-8191076: PngReader throws NegativeArraySizeException in parse_zTXt_chunk when keyword length exceeds chunk size
JDK-8191109: PngReader throws NegativeArraySizeException in parse_iCCP_chunk when keyword length exceeds chunk size
JDK-8191174: PngReader throws undocumented llegalArgumentException with message "Pixel stride times width must be <= scanline stride"
JDK-8191073: JpegImageReader throws IndexOutOfBoundsException when reading malformed header
JDK-8193444: SimpleDateFormat throws ArrayIndexOutOfBoundsException when format contains long sequences of unicode characters
JDK-8193877: DateTimeFormatterBuilder throws ClassCastException when using padding

google/closure-compiler#2842: IllegalStateException in VarCheck: Unexpected variable
google/closure-compiler#2843: NullPointerException when using Arrow Functions in dead code

mozilla/rhino#405: FAILED ASSERTION due to malformed destructuring syntax
mozilla/rhino#406: ClassCastException when compiling malformed destructuring expression
mozilla/rhino#407: java.lang.VerifyError in bytecode produced by CodeGen
mozilla/rhino#409: ArrayIndexOutOfBoundsException when parsing '<!-'
mozilla/rhino#410: NullPointerException in BodyCodeGen

COMPRESS-424: BZip2CompressorInputStream throws ArrayIndexOutOfBoundsException(s) when decompressing malformed input
LANG-1385: StringIndexOutOfBoundsException in NumberUtils.createNumber

The source code examples in the wiki pages can be freely re-used under the same license as the rest of JQF.