RFR: 8261160: Add a deserialization JFR event

Roger Riggs rriggs at openjdk.java.net
Thu Feb 11 14:29:46 UTC 2021


On Wed, 10 Feb 2021 20:30:02 GMT, Roger Riggs <rriggs at openjdk.org> wrote:

>> This issue adds a new event to improve diagnostic information of Java deserialization. The event captures the details of deserialization activity from ObjectInputStream. The event details are similar to that of the serial filter, but is agnostic of whether a filter is installed or not. The event also captures the filter status, if there is one.
>
> Marked as reviewed by rriggs (Reviewer).

As proposed, events are only created if there is a serialFilter in effect (and enabled by JFR configuration).
Being able to create the events without a serialFilter in effect would be useful for monitoring, especially if it could be controlled by a separate JFR configuration option.  (always, never, serial-filter , etc.)

-------------

PR: https://git.openjdk.java.net/jdk/pull/2479


More information about the security-dev mailing list