CVE-2021-45105-snippet-8.java

if (varValue != null) { 
    // recursive replace 
    final int varLen = varValue.length(); 
    buf.replace(startPos, endPos, varValue); 
    altered = true; 
    int change = isRecursiveEvaluationAllowed() 
            ? substitute(event, buf, startPos, varLen, priorVariables) 
            : 0; 
    change = change + (varLen - (endPos - startPos)); 
    pos += change; 
    bufEnd += change; 
    lengthChange += change; 
    chars = getChars(buf); // in case buffer was altered 
}