river-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Patricia Shanahan <p...@acm.org>
Subject Re: A public bootstrap proxy interface and an Entry
Date Wed, 11 Feb 2015 14:15:26 GMT
How do the array length limits work? For example, consider:

int[][][] myArray = new int[1000][1000][1000];

Or the equivalent initialization done in loops in a constructor?

Patricia

On 2/11/2015 3:57 AM, Peter Firmstone wrote:
...
> It appears that fixing ObjectInputStream and Serializable security
> issues was much easier than expected, provided we're prepared to
> implement atomic invariant validation and give up some functionality:
>
>    1. Circular references
>    2. Limits on object cache size and periodically calling reset()
>    3. Limits on array lengths.
>    4. Classes that don't implement Serializable's readObject() method
>       safely.
...

Mime
View raw message