This is an automated email from the ASF dual-hosted git repository.
asf-gitbox-commits pushed a commit to branch 2.2.X
in repository https://gitbox.apache.org/repos/asf/mina.git
The following commit(s) were added to refs/heads/2.2.X by this push:
new 1e9111542 Applied patch for PR #63 (Document the object serialization
format change in IoBuffer.putObject/getObject)
1e9111542 is described below
commit 1e9111542624d1d0c88e3d48b0c4679c702dee40
Author: emmanuel lecharny <[email protected]>
AuthorDate: Tue Sep 22 06:19:41 2026 +0200
Applied patch for PR #63 (Document the object serialization format change
in IoBuffer.putObject/getObject)
---
.../src/main/java/org/apache/mina/core/buffer/IoBuffer.java | 13 +++++++++++++
1 file changed, 13 insertions(+)
diff --git a/mina-core/src/main/java/org/apache/mina/core/buffer/IoBuffer.java
b/mina-core/src/main/java/org/apache/mina/core/buffer/IoBuffer.java
index b68f10824..cde15f9d8 100644
--- a/mina-core/src/main/java/org/apache/mina/core/buffer/IoBuffer.java
+++ b/mina-core/src/main/java/org/apache/mina/core/buffer/IoBuffer.java
@@ -1711,6 +1711,9 @@ public abstract class IoBuffer implements
Comparable<IoBuffer> {
/**
* Reads a Java object from the buffer using the context {@link
ClassLoader} of
* the current thread.
+ * <p>
+ * See {@link #putObject(Object)} for how the serialized form differs
+ * across MINA versions.
*
* @return The read Object
* @throws ClassNotFoundException thrown when we can't find the Class to
use
@@ -1719,6 +1722,9 @@ public abstract class IoBuffer implements
Comparable<IoBuffer> {
/**
* Reads a Java object from the buffer using the specified
<code>classLoader</code>.
+ * <p>
+ * See {@link #putObject(Object)} for how the serialized form differs
+ * across MINA versions.
*
* @param classLoader The classLoader to use to read an Object from the
IoBuffer
* @return The read Object
@@ -1729,6 +1735,13 @@ public abstract class IoBuffer implements
Comparable<IoBuffer> {
/**
* Writes the specified Java object to the buffer.
*
+ * <p>
+ * The serialized form of Serializable objects changed in MINA 2.2.8, as
+ * part of the CVE-2026-47065 fix: a stream produced by MINA 2.2.7 or
+ * earlier cannot be read by MINA 2.2.8 or later, and a stream produced by
+ * MINA 2.2.8 or later cannot be read by MINA 2.2.7 or earlier. Arrays and
+ * primitives are not affected.
+ *
* @param o The Object to write in the IoBuffer
* @return The modified IoBuffer
*/
