-
Bug
-
Resolution: Fixed
-
P4
-
7, 8, 11, 17, 21, 23
-
b22
-
generic
-
generic
| Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
|---|---|---|---|---|---|---|
| JDK-8354139 | 21.0.9-oracle | Johny Jose | P4 | Resolved | Fixed | master |
| JDK-8354140 | 17.0.17-oracle | Johny Jose | P4 | Resolved | Fixed | b02 |
During the de-serialization of MessageFormat, an offset greater than the pattern length should not be allowed. Using said format can later throw a SIOOBE down the line. It seems that the existing check in readObject is off by 1.
- backported by
-
JDK-8354139 Improve MessageFormat readObject checks
-
- Resolved
-
-
-
- Resolved
-
- links to
-
Commit(master)
openjdk/jdk/7af46a6b
-
Review(master)
openjdk/jdk17u-dev/3767
-
Review(master)
openjdk/jdk21u-dev/1987
-
Review(master)
openjdk/jdk/21570
(1 links to)