Merge branch '2.13' into 2.14

Author: cowtowncoder

csv/src/main/java/com/fasterxml/jackson/dataformat/csv/impl/CsvEncoder.java

@@ -405,7 +405,7 @@ public final void write(int columnIndex, int value) throws IOException
         if (columnIndex == _nextColumnToWrite) {
             // inlined 'appendValue(int)'
             // up to 10 digits and possible minus sign, leading comma
-            if ((_outputTail + 12) > _outputTail) {
+            if ((_outputTail + 12) > _outputEnd) {
                 _flushBuffer();
             }
             if (_nextColumnToWrite > 0) {
@@ -424,7 +424,7 @@ public final void write(int columnIndex, long value) throws IOException
         if (columnIndex == _nextColumnToWrite) {
             // inlined 'appendValue(int)'
             // up to 20 digits, minus sign, leading comma
-            if ((_outputTail + 22) > _outputTail) {
+            if ((_outputTail + 22) > _outputEnd) {
                 _flushBuffer();
             }
             if (_nextColumnToWrite > 0) {

release-notes/VERSION-2.x

@@ -33,6 +33,11 @@ Active Maintainers:
  (contributed by @pjfanning)
 * (yaml) Fixes to number decoding based on oss-fuzz findings
 
+2.13.5 (not yet released)
+
+#343: Incorrect output buffer boundary check in `CsvEncoder`
+ (reported by k163377@github)
+
 2.13.4 (03-Sep-2022)
 
 #329: (yaml) Update to SnakeYAML 1.31