Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8185346

Relax RMI Registry Serial Filter to allow arrays of any type

    Details

    • Subcomponent:
    • Resolved In Build:
      b20

      Backports

        Description

        The serialization filter applied to the RMI Registry restricts the types of objects that can be bound in the registry based on the type of the value.
        For array types, the element type is restricted to a known list of types.

        Compatibility issues have been raised based on attempts to bind java.lang.Object[] arrays. Arrays of any type are serializable.

        Arrays, of any type, do not pose a risk except based on the array size, which is checked by the maxarray limit.
        Individual objects inserted in the array are checked separately.

        The filter should be modified to check only the array size against the limit and otherwise allow arrays of any type.

          Issue Links

            Activity

            Hide
            rriggs Roger Riggs added a comment -
            The workaround is to use the override of the registry filter to allow the restricted type(s), for example:
                -Dsun.rmi.registry.registryFilter=java.lang.Object

            -or-

                -Dsun.rmi.registry.registryFilter=*
            Show
            rriggs Roger Riggs added a comment - The workaround is to use the override of the registry filter to allow the restricted type(s), for example:     -Dsun.rmi.registry.registryFilter=java.lang.Object -or-     -Dsun.rmi.registry.registryFilter=*
            Show
            rriggs Roger Riggs added a comment - Review thread:     http://mail.openjdk.java.net/pipermail/core-libs-dev/2017-August/048738.html
            Hide
            hgupdate HG Updates added a comment -
            URL: http://hg.openjdk.java.net/jdk10/jdk10/jdk/rev/6256e94781f5
            User: rriggs
            Date: 2017-08-16 21:06:47 +0000
            Show
            hgupdate HG Updates added a comment - URL: http://hg.openjdk.java.net/jdk10/jdk10/jdk/rev/6256e94781f5 User: rriggs Date: 2017-08-16 21:06:47 +0000

              People

              • Assignee:
                rriggs Roger Riggs
                Reporter:
                rriggs Roger Riggs
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: