RFR: 8371975: Apply java.io.Serial annotations in java.security.sasl

Sergey Bylokhov serb at openjdk.org
Tue Nov 18 00:44:26 UTC 2025


Please review the application of the `@Serial` annotation ([JDK-8202385](https://bugs.openjdk.org/browse/JDK-8202385)) to types in the `java.security.sasl` module to enable stricter compile-time checking of serialization-related declarations.

Example of a similar change https://github.com/openjdk/jdk/pull/27925.

Note: this annotation can be applied to these methods and fields:
  * private void writeObject(java.io.ObjectOutputStream stream) throws IOException
  * private void readObject(java.io.ObjectInputStream stream) throws IOException, ClassNotFoundException
  * private void readObjectNoData() throws ObjectStreamException 
   * ANY-ACCESS-MODIFIER Object writeReplace() throws ObjectStreamException
   * ANY-ACCESS-MODIFIER Object readResolve() throws ObjectStreamException
   * private static final ObjectStreamField[] serialPersistentFields
   * private static final long serialVersionUID

-------------

Commit messages:
 - 8371975: Apply java.io.Serial annotations in java.security.sasl

Changes: https://git.openjdk.org/jdk/pull/28345/files
  Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=28345&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8371975
  Stats: 22 lines in 6 files changed: 16 ins; 0 del; 6 mod
  Patch: https://git.openjdk.org/jdk/pull/28345.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/28345/head:pull/28345

PR: https://git.openjdk.org/jdk/pull/28345


More information about the security-dev mailing list