On 11/7/17 6:48 AM, Christoph Dreis wrote:
======= PATCH =======
diff -r 67aa34b019e1 src/java.base/share/classes/java/io/ObjectInputFilter.java
--- a/src/java.base/share/classes/java/io/ObjectInputFilter.java        Mon Nov 
06 17:48:00 2017 -0800
+++ b/src/java.base/share/classes/java/io/ObjectInputFilter.java        Tue Nov 
07 15:44:36 2017 +0100
@@ -656,8 +656,8 @@
               * otherwise {@code false}
               */
              private static boolean matchesPackage(Class<?> c, String pkg) {
-                String n = c.getName();
-                return n.startsWith(pkg) && n.lastIndexOf('.') == pkg.length() 
- 1;
+                String n = c.getPackageName();
+                return n.length() == pkg.length() - 1 && n.startsWith(pkg);
              }

This is correct but we could simplify this.  We can modify the callers to drop a trailing "." from the pkg parameter.  I took the liberty to revise it a little.

http://cr.openjdk.java.net/~mchung/jdk10/webrevs/8190733/webrev.00/

Roger - can you take a look at the change in ObjectInputFilter?

Mandy

Reply via email to