clarify security checks in ObjectInputStream.enableResolveObject and ObjectOutputStream.enableReplaceObject

XMLWordPrintable

    • b162
    • generic
    • generic
    • Not verified

        The specification for this method is as follows, in part:

        ==========
        protected boolean enableReplaceObject(boolean enable) throws SecurityException

        ...

        If enable is true, and there is a security manager installed, this method first calls the security manager's checkPermission method....
        ==========

        This does not match the implementation. The implementation will only issue the security check if object replacement is not enabled and enableReplaceObject(true) is called.

              Assignee:
              Stuart Marks
              Reporter:
              Stuart Marks
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: