RFR: 8361635: Missing List length validation in the Class-File API [v3]

[Chen Liang]

On Fri, 29 Aug 2025 14:57:01 GMT, Chen Liang <liach at openjdk.org> wrote:

>> The `class` file format often only stores lists up to 65535 in size because size is encoded as a u2. Currently, we truncate the list size and write all contents, creating malformed `class` files. Almost all scenarios where such oversized lists are created can be considered an error; we should eagerly reject lists that would never be encodable in the `class` file format when users construct model objects.
>
> Chen Liang has updated the pull request with a new target base due to a merge or a rebase. The pull request now contains 21 commits:
> 
>  - Merge branch 'master' of https://github.com/openjdk/jdk into fix/cf-list-sizes
>  - Link to u1/u2
>  - Merge branch 'fix/cf-u2-validation' into fix/cf-list-sizes
>  - Another missed spot
>  - Typo, thanks Adam
>  - Missed one link
>  - New u2 central info stage
>  - Merge branch 'master' of https://github.com/openjdk/jdk into fix/cf-u2-validation
>  - Package-level information
>  - Merge branch 'master' of https://github.com/openjdk/jdk into fix/cf-list-sizes
>  - ... and 11 more: https://git.openjdk.org/jdk/compare/ae960772...0e74a9a5

Thanks for the reviews!

-------------

PR Comment: https://git.openjdk.org/jdk/pull/26252#issuecomment-3250481175