RFR: 8328874: Class::forName0 should validate the class name length early [v4]

Chen Liang liach at openjdk.org
Tue Aug 19 16:08:37 UTC 2025


On Tue, 19 Aug 2025 15:20:52 GMT, Guanqiang Han <ghan at openjdk.org> wrote:

>> Validate class name length immediately after GetStringUTFLength() in Class.forName0. This prevents potential issues caused by overly long class names before they reach later code that would reject them, throwing ClassNotFoundException early.
>
> Guanqiang Han has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Update Class.java
>   
>   correct length of class name

There is a `jdk.internal.util.ModifiedUtf::utfLen` that you can use instead of writing your own function.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/26802#issuecomment-3201350265


More information about the core-libs-dev mailing list