[jdk17u-dev] RFR: 8299677: Formatter.format might take a long time to format an integer or floating-point [v2]

Paul Hohensee phh at openjdk.org
Fri Jan 27 17:00:53 UTC 2023


> Simple almost clean backport of a potential DOS attack vector fix. Copyright date conflict plus changed
> 
> Flags.contains(f, Flags.ZERO_PAD)
> 
> to
> 
> f.contains(Flags.ZERO_PAD)
> 
> Passes new and old Formatter tests.

Paul Hohensee has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains two additional commits since the last revision:

 - Merge branch 'master' into backport-8299677
 - Backport 33412c102ce799ff2de3512df77e6e07d76acd36

-------------

Changes:
  - all: https://git.openjdk.org/jdk17u-dev/pull/1077/files
  - new: https://git.openjdk.org/jdk17u-dev/pull/1077/files/5dbcb3ae..9d08d0cf

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk17u-dev&pr=1077&range=01
 - incr: https://webrevs.openjdk.org/?repo=jdk17u-dev&pr=1077&range=00-01

  Stats: 2039 lines in 111 files changed: 1105 ins; 540 del; 394 mod
  Patch: https://git.openjdk.org/jdk17u-dev/pull/1077.diff
  Fetch: git fetch https://git.openjdk.org/jdk17u-dev pull/1077/head:pull/1077

PR: https://git.openjdk.org/jdk17u-dev/pull/1077


More information about the jdk-updates-dev mailing list