RFR: 8328874: Class::forName0 should validate the class name length early [v5]

Roger Riggs rriggs at openjdk.org
Fri Aug 22 20:02:51 UTC 2025


On Wed, 20 Aug 2025 01:30:27 GMT, Guanqiang Han <ghan at openjdk.org> wrote:

>> Validate class name length immediately after GetStringUTFLength() in Class.forName0. This prevents potential issues caused by overly long class names before they reach later code that would reject them, throwing ClassNotFoundException early.
>
> Guanqiang Han has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Update Class.java
>   
>   updates the class name length validation logic on the Java side

What tests validate the behavior is the same both with and without the shortcut?  Tnx.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/26802#issuecomment-3215471515


More information about the core-libs-dev mailing list