RFR: 8361635: Missing List length validation in the Class-File API [v3]

Chen Liang liach at openjdk.org
Fri Aug 29 14:57:01 UTC 2025


> The `class` file format often only stores lists up to 65535 in size because size is encoded as a u2. Currently, we truncate the list size and write all contents, creating malformed `class` files. Almost all scenarios where such oversized lists are created can be considered an error; we should eagerly reject lists that would never be encodable in the `class` file format when users construct model objects.

Chen Liang has updated the pull request with a new target base due to a merge or a rebase. The pull request now contains 21 commits:

 - Merge branch 'master' of https://github.com/openjdk/jdk into fix/cf-list-sizes
 - Link to u1/u2
 - Merge branch 'fix/cf-u2-validation' into fix/cf-list-sizes
 - Another missed spot
 - Typo, thanks Adam
 - Missed one link
 - New u2 central info stage
 - Merge branch 'master' of https://github.com/openjdk/jdk into fix/cf-u2-validation
 - Package-level information
 - Merge branch 'master' of https://github.com/openjdk/jdk into fix/cf-list-sizes
 - ... and 11 more: https://git.openjdk.org/jdk/compare/ae960772...0e74a9a5

-------------

Changes: https://git.openjdk.org/jdk/pull/26252/files
  Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=26252&range=02
  Stats: 886 lines in 48 files changed: 775 ins; 20 del; 91 mod
  Patch: https://git.openjdk.org/jdk/pull/26252.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/26252/head:pull/26252

PR: https://git.openjdk.org/jdk/pull/26252


More information about the core-libs-dev mailing list