RFR: 8284638: store skip buffers in InputStream Object

Roger Riggs rriggs at openjdk.java.net
Thu Apr 14 15:39:30 UTC 2022


On Thu, 14 Apr 2022 04:09:48 GMT, XenoAmess <duke at openjdk.java.net> wrote:

> Why as it already be a unacceptable option for security reason?

A shared (static) buffer would be visible to application controlled subclasses when the `read(buffer, 0, len)` method is called.
The subclass could examine the buffer and see data read from another stream or thread.
The JDK takes care not to allow this kind of exposure.

-------------

PR: https://git.openjdk.java.net/jdk/pull/5872


More information about the core-libs-dev mailing list