[jdk17u-dev] RFR: 8299677: Formatter.format might take a long time to format an integer or floating-point [v2]

Wed Apr 26 14:57:53 UTC 2023

On Fri, 27 Jan 2023 17:00:53 GMT, Paul Hohensee <phh at openjdk.org> wrote:

>> Simple almost clean backport of a potential DOS attack vector fix. Copyright date conflict plus changed
>> 
>> Flags.contains(f, Flags.ZERO_PAD)
>> 
>> to
>> 
>> f.contains(Flags.ZERO_PAD)
>> 
>> Passes new and old Formatter tests.
>
> Paul Hohensee has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains two additional commits since the last revision:
> 
>  - Merge branch 'master' into backport-8299677
>  - Backport 33412c102ce799ff2de3512df77e6e07d76acd36

LGTM.

-------------

Marked as reviewed by mdoerr (Reviewer).

PR Review: https://git.openjdk.org/jdk17u-dev/pull/1077#pullrequestreview-1402156409