[jdk8u-dev] RFR: 8361748: Enforce limits on the size of an XBM image

[Severin Gehwolf]

On Wed, 4 Feb 2026 14:38:30 GMT, Francisco Ferrari Bihurriet <fferrari at openjdk.org> wrote:

> Hi, this pull request contains:
> 
> * 8a4de7e8f8523b2fd9e492bc57bac5c7c9a7e115: a clean [JDK-8361748](https://bugs.openjdk.org/browse/JDK-8361748 "Enforce limits on the size of an XBM image") backport from openjdk/jdk11u-dev at 4e9144cec6d91b55ff6b5ecdb1366fe960cf0063
> * fb27ada8e6668ef915725a780d2f37c13c390be1: a clean [JDK-8373727](https://bugs.openjdk.org/browse/JDK-8373727 "New XBM images parser regression: only the first line of the bitmap array is parsed") backport from openjdk/jdk11u-dev at 99d39c924322594a7cf4940b95cd0e4a75c6fd12
> * 64d624cb61c369a9d753a12b7e862e37e7855aa6: adjustments required for 8u (due to unavailable APIs and the changed test path)
> 
> #### Testing
> 
> * The new `jdk/test/java/awt/image/XBMDecoder/XBMDecoderTest.java` is passing in a local Linux x64 build
> * [GHA run](https://github.com/franferrax/jdk8u-dev/actions/runs/21674111373) Linux failures in `hotspot/tier1` and `jdk/security_infra` are unrelated to this change:
>     * `hotspot/test/compiler/5091921/Test7005594.java`
>     * `jdk/test/security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java`

This looks fine.

-------------

Marked as reviewed by sgehwolf (Reviewer).

PR Review: https://git.openjdk.org/jdk8u-dev/pull/757#pullrequestreview-3820455438