[jdk11u-dev] RFR: 8299677: Formatter.format might take a long time to format an integer or floating-point [v8]

[Paul Hohensee]

> Simple almost clean backport of a potential DOS attack vector fix. Backport from JDK 17 (see https://github.com/openjdk/jdk17u-dev/pull/1077) is clean. Copyright date conflict, plus changed
> 
> Flags.contains(f, Flags.ZERO_PAD)
> 
> to
> 
> f.contains(Flags.ZERO_PAD)
> 
> Passes new and old Formatter tests.

Paul Hohensee has updated the pull request incrementally with one additional commit since the last revision:

  jdk/security/infra/java/security/cert/CertPathValidator/certification/CertignaRoots.java

-------------

Changes:
  - all: https://git.openjdk.org/jdk11u-dev/pull/1667/files
  - new: https://git.openjdk.org/jdk11u-dev/pull/1667/files/5edd53ac..203f6352

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk11u-dev&pr=1667&range=07
 - incr: https://webrevs.openjdk.org/?repo=jdk11u-dev&pr=1667&range=06-07

  Stats: 293 lines in 1 file changed: 0 ins; 293 del; 0 mod
  Patch: https://git.openjdk.org/jdk11u-dev/pull/1667.diff
  Fetch: git fetch https://git.openjdk.org/jdk11u-dev.git pull/1667/head:pull/1667

PR: https://git.openjdk.org/jdk11u-dev/pull/1667