[jdk11u-dev] RFR: 8299677: Formatter.format might take a long time to format an integer or floating-point [v2]

Christoph Langer clanger at openjdk.org
Mon Apr 24 05:32:56 UTC 2023


On Fri, 27 Jan 2023 16:56:11 GMT, Paul Hohensee <phh at openjdk.org> wrote:

>> Simple almost clean backport of a potential DOS attack vector fix. Backport from JDK 17 (see https://github.com/openjdk/jdk17u-dev/pull/1077) is clean. Copyright date conflict, plus changed
>> 
>> Flags.contains(f, Flags.ZERO_PAD)
>> 
>> to
>> 
>> f.contains(Flags.ZERO_PAD)
>> 
>> Passes new and old Formatter tests.
>
> Paul Hohensee has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains two additional commits since the last revision:
> 
>  - Merge branch 'master' into backport-8299677
>  - Backport 33412c102ce799ff2de3512df77e6e07d76acd36

Same here, test failing.

-------------

PR Comment: https://git.openjdk.org/jdk11u-dev/pull/1667#issuecomment-1519408197


More information about the jdk-updates-dev mailing list