RFR: 8284638: store skip buffers in InputStream Object
Roger Riggs
rriggs at openjdk.java.net
Thu Apr 14 15:39:30 UTC 2022
On Thu, 14 Apr 2022 04:09:48 GMT, XenoAmess <duke at openjdk.java.net> wrote:
> Why as it already be a unacceptable option for security reason?
A shared (static) buffer would be visible to application controlled subclasses when the `read(buffer, 0, len)` method is called.
The subclass could examine the buffer and see data read from another stream or thread.
The JDK takes care not to allow this kind of exposure.
-------------
PR: https://git.openjdk.java.net/jdk/pull/5872
More information about the core-libs-dev
mailing list