RFR: 8273660: De-Serialization Stack is suppressing ClassNotFoundException [v2]

Roger Riggs rriggs at openjdk.java.net
Fri Oct 29 15:35:54 UTC 2021


On Fri, 29 Oct 2021 15:06:12 GMT, Daniel Fuchs <dfuchs at openjdk.org> wrote:

>> Roger Riggs has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   Correct comment on the handling of ClassNotFoundException
>
> src/java.base/share/classes/java/io/ObjectInputStream.java line 2663:
> 
>> 2661:                 ClassNotFoundException ex = handles.lookupException(objHandle);
>> 2662:                 if (ex != null) {
>> 2663:                     // Wrap the exception so it can be handled in GetField.get(String, Object)
> 
> I am not sure I understand this comment. We are in `GetField.get(String, Object)`, aren't we?

Right, will correct comment to refer to the `invokeReadObject` call in `readSerialData`.

-------------

PR: https://git.openjdk.java.net/jdk/pull/6053


More information about the core-libs-dev mailing list