RFR: 8361635: Missing List length validation in the Class-File API [v3]
Chen Liang
liach at openjdk.org
Fri Aug 29 14:57:01 UTC 2025
> The `class` file format often only stores lists up to 65535 in size because size is encoded as a u2. Currently, we truncate the list size and write all contents, creating malformed `class` files. Almost all scenarios where such oversized lists are created can be considered an error; we should eagerly reject lists that would never be encodable in the `class` file format when users construct model objects.
Chen Liang has updated the pull request with a new target base due to a merge or a rebase. The pull request now contains 21 commits:
- Merge branch 'master' of https://github.com/openjdk/jdk into fix/cf-list-sizes
- Link to u1/u2
- Merge branch 'fix/cf-u2-validation' into fix/cf-list-sizes
- Another missed spot
- Typo, thanks Adam
- Missed one link
- New u2 central info stage
- Merge branch 'master' of https://github.com/openjdk/jdk into fix/cf-u2-validation
- Package-level information
- Merge branch 'master' of https://github.com/openjdk/jdk into fix/cf-list-sizes
- ... and 11 more: https://git.openjdk.org/jdk/compare/ae960772...0e74a9a5
-------------
Changes: https://git.openjdk.org/jdk/pull/26252/files
Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=26252&range=02
Stats: 886 lines in 48 files changed: 775 ins; 20 del; 91 mod
Patch: https://git.openjdk.org/jdk/pull/26252.diff
Fetch: git fetch https://git.openjdk.org/jdk.git pull/26252/head:pull/26252
PR: https://git.openjdk.org/jdk/pull/26252
More information about the core-libs-dev
mailing list