Hi Michael, Thanks for these details and explanation. It had been a long time, I worked on java object serialization. I can now recall the concepts.
I've committed the fix (mirroring the fix which David mentioned), to the trunk and schema1.1-dev branch. On Fri, Apr 20, 2018 at 6:12 PM, Michael Glavassevich <[email protected]> wrote: > Hi Mukul, > > I would suggest reviewing the documentation for java.io.Serializable [1] > for details about readObject()/writeObject(). This code gets called by Java > when a user reads or writes a DOM using Java object serialization. > > The conversions between ArrayList and Vector in NamedNodeMapImpl are there > for compatibility reasons. Casting to Vector when creating the ArrayList in > readObject() prevents other unexpected List types from being injected into > the stream. > > Thanks. > > [1] https://docs.oracle.com/javase/8/docs/api/java/io/Serializable.html > > Michael Glavassevich > XML Technologies and WAS Development > IBM Toronto Lab > E-mail: [email protected] > E-mail: [email protected] -- Regards, Mukul Gandhi
