Uploaded image for project: 'JBoss Marshalling'
  1. JBoss Marshalling
  2. JBMAR-168

Self references allow access to uninitialized data

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Won't Do
    • Icon: Major Major
    • None
    • 1.4.3.Final
    • JBoss Serialization
    • None
    • Hide

      See attached.

      Show
      See attached.
    • Workaround Exists
    • Hide
      • Change the alphabetical ordering of the fields so that the members that will be referenced come before the member containing the reference
      • Make the member containing the reference transient and use a writeObject/readObject pair to ensure that it is always written last
      • Mark the serializable object as Externalizable and read/write the member containing the reference last
      Show
      Change the alphabetical ordering of the fields so that the members that will be referenced come before the member containing the reference Make the member containing the reference transient and use a writeObject/readObject pair to ensure that it is always written last Mark the serializable object as Externalizable and read/write the member containing the reference last

      When an object being deserialized contains a self-reference (nested arbitrarily deep), the nested reference is returned as a ref to the uninitialized object.

      If this reference is used (for example is inside a container that calls equals/hashcode), it can trigger a NullPointerException, access incorrect data, etc since the object's data has not been initialized.

        1. JBMAR168-test.zip
          1 kB

              dlloyd@redhat.com David Lloyd
              rhn-support-dereed Dennis Reed
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: