DataMatrix: check array bounds

DEVSIX-1845

Author: pavel-alay

barcodes/src/main/java/com/itextpdf/barcodes/BarcodeDataMatrix.java

@@ -339,6 +339,12 @@ public int setCode(String text) {
      * <CODE>DM_ERROR_EXTENSION</CODE> - an error was while parsing an extension.
      */
     public int setCode(byte[] text, int textOffset, int textSize) {
+        if (textOffset < 0) {
+            throw new IndexOutOfBoundsException("" + textOffset);
+        }
+        if (textOffset + textSize > text.length) {
+            throw new IndexOutOfBoundsException("" + textSize);
+        }
         int extCount, e, k, full;
         DmParams dm, last;
         byte[] data = new byte[2500];

barcodes/src/test/java/com/itextpdf/barcodes/BarcodeDataMatrixTest.java

@@ -221,4 +221,35 @@ public void barcode10Test() {
         int result = barcodeDataMatrix.setCode("AbcdFFghijklmnopqrstuWXSQ");
         Assert.assertEquals(BarcodeDataMatrix.DM_ERROR_TEXT_TOO_BIG, result);
     }
+
+    @Test
+    public void barcode11Test() {
+        BarcodeDataMatrix barcodeDataMatrix = new BarcodeDataMatrix();
+        barcodeDataMatrix.setWidth(18);
+        barcodeDataMatrix.setHeight(18);
+        byte[] str = "AbcdFFghijklmnop".getBytes();
+        int result = barcodeDataMatrix.setCode(str, 0, str.length);
+        Assert.assertEquals(BarcodeDataMatrix.DM_NO_ERROR, result);
+    }
+
+
+    @Test
+    public void barcode12Test() {
+        junitExpectedException.expect(IndexOutOfBoundsException.class);;
+        BarcodeDataMatrix barcodeDataMatrix = new BarcodeDataMatrix();
+        barcodeDataMatrix.setWidth(18);
+        barcodeDataMatrix.setHeight(18);
+        byte[] str = "AbcdFFghijklmnop".getBytes();
+        barcodeDataMatrix.setCode(str, -1, str.length);
+    }
+
+    @Test
+    public void barcode13Test() {
+        junitExpectedException.expect(IndexOutOfBoundsException.class);;
+        BarcodeDataMatrix barcodeDataMatrix = new BarcodeDataMatrix();
+        barcodeDataMatrix.setWidth(18);
+        barcodeDataMatrix.setHeight(18);
+        byte[] str = "AbcdFFghijklmnop".getBytes();
+        barcodeDataMatrix.setCode(str, 0, str.length + 1);
+    }
 }