Uploaded image for project: 'JBoss Marshalling'
  1. JBoss Marshalling
  2. JBMAR-168

Self references allow access to uninitialized data

    XMLWordPrintable

Details

    • Bug
    • Resolution: Won't Do
    • Major
    • None
    • 1.4.3.Final
    • JBoss Serialization
    • None
    • Hide

      See attached.

      Show
      See attached.
    • Workaround Exists
    • Hide
      • Change the alphabetical ordering of the fields so that the members that will be referenced come before the member containing the reference
      • Make the member containing the reference transient and use a writeObject/readObject pair to ensure that it is always written last
      • Mark the serializable object as Externalizable and read/write the member containing the reference last
      Show
      Change the alphabetical ordering of the fields so that the members that will be referenced come before the member containing the reference Make the member containing the reference transient and use a writeObject/readObject pair to ensure that it is always written last Mark the serializable object as Externalizable and read/write the member containing the reference last

    Description

      When an object being deserialized contains a self-reference (nested arbitrarily deep), the nested reference is returned as a ref to the uninitialized object.

      If this reference is used (for example is inside a container that calls equals/hashcode), it can trigger a NullPointerException, access incorrect data, etc since the object's data has not been initialized.

      Attachments

        Issue Links

          is related to

          Bug - A problem that impairs or prevents the functions of the product. JBMAR-144 Deserialization of TreeSets fails again

          • Minor - To be worked after urgent, high, and medium priorities are resolved. This term is chosen when the severity of the issue is low, or the complexity or effort to correct it may be higher, relatively speaking. For low priority issues, known workarounds exist or are not needed due to the trivial effort needed to address the issue.
          • Resolved

          Activity

            People

              dlloyd@redhat.com David Lloyd
              rhn-support-dereed Dennis Reed
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: