[CVE-2012-2098] Actually this shift is supposed to be unsigned.

Kudos to Findbugs: http://findbugs.sourceforge.net/bugDescriptions.html#IM_AVERAGE_COMPUTATION_COULD_OVERFLOW git-svn-id: https://svn.apache.org/repos/asf/commons/proper/compress/trunk@1340799 13f79535-47bb-0310-9956-ffa450edef68
apache · May 20, 2012 · 8f70246 · 8f70246
1 parent 15883a6
commit 8f70246
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/main/java/org/apache/commons/compress/compressors/bzip2/BlockSort.java b/src/main/java/org/apache/commons/compress/compressors/bzip2/BlockSort.java
@@ -370,7 +370,7 @@ private void fallbackQSort3(int[] fmap,
             if (r3 == 0) {
                 med = eclass[fmap[lo]]; 
             } else if (r3 == 1) {
-                med = eclass[fmap[(lo+hi)>>1]];
+                med = eclass[fmap[(lo + hi) >>> 1]];
             } else {
                 med = eclass[fmap[hi]];
             }