Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8185346

Relax RMI Registry Serial Filter to allow arrays of any type

    Details

    • Subcomponent:
    • Resolved In Build:
      b20

      Backports

        Description

        The serialization filter applied to the RMI Registry restricts the types of objects that can be bound in the registry based on the type of the value.
        For array types, the element type is restricted to a known list of types.

        Compatibility issues have been raised based on attempts to bind java.lang.Object[] arrays. Arrays of any type are serializable.

        Arrays, of any type, do not pose a risk except based on the array size, which is checked by the maxarray limit.
        Individual objects inserted in the array are checked separately.

        The filter should be modified to check only the array size against the limit and otherwise allow arrays of any type.

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  rriggs Roger Riggs
                  Reporter:
                  rriggs Roger Riggs
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  3 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: