[jdk11u-dev] Integrated: 8299677: Formatter.format might take a long time to format an integer or floating-point

Paul Hohensee phh at openjdk.org
Thu Apr 4 22:11:17 UTC 2024


On Tue, 17 Jan 2023 18:17:08 GMT, Paul Hohensee <phh at openjdk.org> wrote:

> Simple almost clean backport of a potential DOS attack vector fix. Backport from JDK 17 (see https://github.com/openjdk/jdk17u-dev/pull/1077) is clean. Copyright date conflict, plus changed
> 
> Flags.contains(f, Flags.ZERO_PAD)
> 
> to
> 
> f.contains(Flags.ZERO_PAD)
> 
> Passes new and old Formatter tests.

This pull request has now been integrated.

Changeset: 9ac4063d
Author:    Paul Hohensee <phh at openjdk.org>
URL:       https://git.openjdk.org/jdk11u-dev/commit/9ac4063d14dfa9633cea90e13e2cd13681826255
Stats:     318 lines in 2 files changed: 313 ins; 1 del; 4 mod

8299677: Formatter.format might take a long time to format an integer or floating-point

Reviewed-by: mdoerr, shade
Backport-of: 33412c102ce799ff2de3512df77e6e07d76acd36

-------------

PR: https://git.openjdk.org/jdk11u-dev/pull/1667


More information about the jdk-updates-dev mailing list