[jdk11u-dev] RFR: 8361748: Enforce limits on the size of an XBM image

Francisco Ferrari Bihurriet fferrari at openjdk.org
Thu Dec 18 23:54:19 UTC 2025


Hi, this is an almost clean backport of openjdk/jdk17u-dev#3901.

The only differences are in context (deleted and surrounding code) due to 11u missing [JDK-8211300: Convert C-style array declarations in JDK client code](https://bugs.openjdk.org/browse/JDK-8211300).

NOTE: as part of this work, I found some issues with the original patch (see [JDK-8373727](https://bugs.openjdk.org/browse/JDK-8373727 "New XBM images parser regression: only the first line of the bitmap array is parsed")), so an additional backport of that fix will be needed too.

#### Testing

The [GitHub Actions testing run (tier1 on various platforms)](https://github.com/franferrax/jdk11u-dev/actions/runs/20177700844) has passed.

In addition, the new `test/jdk/java/awt/image/XBMDecoder/XBMDecoderTest.java` is passing in a local slowdebug build on _Fedora Linux x64_.

-------------

Commit messages:
 - Backport c71be802b530034169d17325478dba6e2f1c3238

Changes: https://git.openjdk.org/jdk11u-dev/pull/3135/files
  Webrev: https://webrevs.openjdk.org/?repo=jdk11u-dev&pr=3135&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8361748
  Stats: 244 lines in 7 files changed: 157 ins; 33 del; 54 mod
  Patch: https://git.openjdk.org/jdk11u-dev/pull/3135.diff
  Fetch: git fetch https://git.openjdk.org/jdk11u-dev.git pull/3135/head:pull/3135

PR: https://git.openjdk.org/jdk11u-dev/pull/3135


More information about the jdk-updates-dev mailing list