Code review request, JDK-8010814, More buffers are stored or returned without cloning

Xuelei Fan xuelei.fan at oracle.com
Thu May 16 09:52:19 UTC 2013


On 5/16/2013 5:22 PM, Weijun Wang wrote:
> Hi Xuelei
> 
> I'm busy on something else, so probably have no time (or cannot
> concentrate) to read in details.
> 
Not urgent fix, so please review these request only when you available.

> In my opinion, there are several cases as to whether to clone or not:
> 
> 1. MUST NOT clone, because the value must be shared so that change at
> one side appears on the other side.
> 
> 2. MUST clone, public available methods that leads to security issues.
> 
> 3. So so, although public methods, cannot be used to do bad things.
> 
> 4. Not an issue. Internal methods.
> 
> In the patch, are the first two cases #1 or #3.
> 
It's #2.

For #1 and #3, I added a few comment lines in 8010815.

> Sorry I also have no time to read
> 
>   JDK-8010814, More buffers are stored or returned without cloning
>   http://cr.openjdk.java.net/~xuelei/8010815/webrev.00/
> 
> but I am not sure if those env cases belong to #1.
> 
I think both fixes are for #2.

Xuelei

> Thanks
> Max
> 
> 
> On 5/16/13 5:08 PM, Xuelei Fan wrote:
>> Hi,
>>
>> There is another fix to avoid the use of mutable objects.
>>
>> webrev: http://cr.openjdk.java.net/~xuelei/8010814/webrev.00/
>>
>> Thanks,
>> Xuelei
>>




More information about the core-libs-dev mailing list