Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8361635

Missing List length validation in the Class-File API

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: P4 P4
    • None
    • 25
    • core-libs
    • None

      Currently, Class-File API only simply validates the input lists with a copy to avoid tampering. It does not validate the stored list is actually representable in the class file format given the size constraints (u1, u2, etc.). These constraints should be respected, and we should fail fast if such lists cannot be encoded instead of producing malformed data.

            liach Chen Liang
            liach Chen Liang
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: