RFR 9: JEP 290: Filter Incoming Serialization Data

Roger Riggs Roger.Riggs at Oracle.com
Tue Jul 26 17:57:01 UTC 2016


Hi,

Updated the specdiff and javadoc with SerializablePermission and misc 
editorial cleanups.

SpecDiff:
http://cr.openjdk.java.net/~rriggs/filter-diffs/overview-summary.html

Javadoc (subset)
http://cr.openjdk.java.net/~rriggs/filter-javadoc/java/io/ObjectInputStream.html
http://cr.openjdk.java.net/~rriggs/filter-javadoc/java/io/ObjectInputFilter.html
http://cr.openjdk.java.net/~rriggs/filter-javadoc/java/io/SerializablePermission.html

Also, noticed that a filter could not distinguish between a reference to 
an array class and
the callback to check the size of a zero length array (size == 0). 
Modified the
range of the size to be positive when creating an array and otherwise 
negative.

Webrev:
http://cr.openjdk.java.net/~rriggs/webrev-serial-filter-jdk9-8155760/

Roger


On 7/26/2016 12:34 PM, Roger Riggs wrote:
> Hi Chris,
>
> yes, its in the webrev, but I neglected to include it in the javadoc 
> and specdiff updates.
>
> Thanks, Roger
>
>
> On 7/26/2016 12:20 PM, Chris Hegarty wrote:
>> Another final thought that just occurred to me…
>>
>> java.io.SerializablePermission will need its class-level javadoc 
>> updated to
>> include the new permission target name.
>>
>> -Chris.
>>
>>> On 25 Jul 2016, at 19:55, Roger Riggs <Roger.Riggs at oracle.com> wrote:
>>>
>>> Hi Chris,
>>>
>>> Thanks for the review and comments,
>>>
>>> Updates in place:
>>>
>>> Webrev:
>>> http://cr.openjdk.java.net/~rriggs/webrev-serial-filter-jdk9-8155760/
>>>
>>> SpecDiff:
>>> http://cr.openjdk.java.net/~rriggs/filter-diffs/overview-summary.html
>>>
>>> Javadoc (subset)
>>> http://cr.openjdk.java.net/~rriggs/filter-javadoc/java/io/ObjectInputStream.html 
>>>
>>>
>>> http://cr.openjdk.java.net/~rriggs/filter-javadoc/java/io/ObjectInputFilter.html 
>>>
>>>



More information about the core-libs-dev mailing list