Update release notes wrt #518

cowtowncoder · cowtowncoder · commit fcbf9ec4d26f · 2024-10-18T17:38:37.000-07:00
diff --git a/cbor/src/main/java/com/fasterxml/jackson/dataformat/cbor/CBORParser.java b/cbor/src/main/java/com/fasterxml/jackson/dataformat/cbor/CBORParser.java
@@ -3848,7 +3848,7 @@ protected void _reportIncompleteBinaryRead(int expLen, int actLen) throws IOExce
                 expLen, actLen), _currToken);
     }
 
-    // @since 2.19
+    // @since 2.18.1
     private String _reportTruncatedUTF8InString(int strLenBytes, int truncatedCharOffset,
             int firstUTFByteValue, int bytesExpected)
         throws IOException
diff --git a/release-notes/CREDITS-2.x b/release-notes/CREDITS-2.x
@@ -346,3 +346,7 @@ Joachim Lous (@jlous)
 Robert Noack (@mr-robert)
  * Reported #509: IonValueMapper.builder() not implemented, does not register modules
   (2.18.0)
+
+Knut Wannheden (@knutwannheden)
+ * Contributed #518: Should not read past end for CBOR string values
+  (2.18.1)
diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x
@@ -14,6 +14,11 @@ Active maintainers:
 === Releases ===
 ------------------------------------------------------------------------
 
+2.18.1 (not yet released)
+
+#518: Should not read past end for CBOR string values
+ (contributed by Knut W)
+
 2.18.0 (26-Sep-2024)
 
 #167: (avro) Incompatibility with Avro >=1.9.0 (upgrade to Avro 1.11.3)

Original file line number	Diff line number	Diff line change
`@@ -3848,7 +3848,7 @@ protected void _reportIncompleteBinaryRead(int expLen, int actLen) throws IOExce`
`3848`	`3848`	`expLen, actLen), _currToken);`
`3849`	`3849`	`}`
`3850`	`3850`
`3851`		`- // @since 2.19`
	`3851`	`+ // @since 2.18.1`
`3852`	`3852`	`private String _reportTruncatedUTF8InString(int strLenBytes, int truncatedCharOffset,`
`3853`	`3853`	`int firstUTFByteValue, int bytesExpected)`
`3854`	`3854`	`throws IOException`