Loading...

XML

Word

Printable

Type: Sub-task
Resolution: Delivered
Priority: P3
Fix Version/s: 10
Affects Version/s: 7u161, 8u152, 8u162, 10
Component/s: core-libs
Labels:
- RN-Change
- release-note

Subcomponent:
java.rmi
CPU:

generic
OS:

generic
Verification:
Verified

Issue	Fix Version	Assignee	Priority	Status	Resolution
JDK-8193810	8u162	Clifford Wayne	P3	Closed	Delivered
JDK-8196596	8u152	Owen Stuart	P3	Closed	Delivered
JDK-8193809	7u171	Clifford Wayne	P3	Closed	Withdrawn
JDK-8196597	7u161	Owen Stuart	P3	Closed	Delivered

The RMI Registry built-in serial filter has been modified to check only the array size and not the component type. The maximum array size has been increased to 1,000,000. The override filter can be used to decrease the limit. Array sizes greater than the maxarray limit will be rejected. Sizes less than the maxarray limit will be allowed.

The `java.security` file contains more information about the `sun.rmi.registry.registryFilter` property and the `conf/security/java.security` configuration file has been updated to better describe the default behavior and how to override it.

backported by

JDK-8193809 Release Note: RMI Registry Filter Allows Binding Arrays of Any Type

Closed

JDK-8193810 Release Note: RMI Registry Filter Allows Binding Arrays of Any Type

Closed

JDK-8196596 Release Note: RMI Registry Filter Allows Binding Arrays of Any Type

Closed

JDK-8196597 Release Note: RMI Registry Filter Allows Binding Arrays of Any Type

Closed

Assignee:: Ramanand Patil (Inactive)

Reporter:: Ramanand Patil (Inactive)

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Created:: 2017-12-18 20:54

Updated:: 2019-04-09 10:36

Resolved:: 2017-12-19 08:08

Details

Backports

Description

Attachments

Issue Links

Activity

People

Dates