[jdk11u-dev] RFR: 8299677: Formatter.format might take a long time to format an integer or floating-point [v9]
Paul Hohensee
phh at openjdk.org
Wed Apr 3 23:22:25 UTC 2024
> Simple almost clean backport of a potential DOS attack vector fix. Backport from JDK 17 (see https://github.com/openjdk/jdk17u-dev/pull/1077) is clean. Copyright date conflict, plus changed
>
> Flags.contains(f, Flags.ZERO_PAD)
>
> to
>
> f.contains(Flags.ZERO_PAD)
>
> Passes new and old Formatter tests.
Paul Hohensee has updated the pull request incrementally with one additional commit since the last revision:
Merge
-------------
Changes:
- all: https://git.openjdk.org/jdk11u-dev/pull/1667/files
- new: https://git.openjdk.org/jdk11u-dev/pull/1667/files/203f6352..f0ead06a
Webrevs:
- full: https://webrevs.openjdk.org/?repo=jdk11u-dev&pr=1667&range=08
- incr: https://webrevs.openjdk.org/?repo=jdk11u-dev&pr=1667&range=07-08
Stats: 1 line in 1 file changed: 1 ins; 0 del; 0 mod
Patch: https://git.openjdk.org/jdk11u-dev/pull/1667.diff
Fetch: git fetch https://git.openjdk.org/jdk11u-dev.git pull/1667/head:pull/1667
PR: https://git.openjdk.org/jdk11u-dev/pull/1667
More information about the jdk-updates-dev
mailing list