CVE-2026-24806

@@ -89,8 +89,28 @@ public void write(byte[] b) throws IOException {
     }
 
     public void write(byte[] b, int off, int len) throws IOException {
-        dos.write(b, off, len);
-    }
+       // Input validation
+       if (b == null) {
+           throw new NullPointerException();
+       }
+       
+       if (off < 0 || len < 0 || off + len > b.length) {
+           throw new ArrayIndexOutOfBoundsException();
+       }
+       
+       // Original buffering logic
+       while (len > 0) {
+           int bytes = Math.min(segmentLength - bytesWritten, len);
+           System.arraycopy(b, off, buffer, bytesWritten, bytes);
+           off += bytes;
+           len -= bytes;
+           bytesWritten += bytes;
+   
+           if (bytesWritten == segmentLength) {
+               flush();
+           }
+       }
+   }
 
     public void write(int b) throws IOException {
         dos.write(b);