ramanathan1504 commented on PR #4271:
URL: https://github.com/apache/logging-log4j2/pull/4271#issuecomment-5574142496
Old streams also stop being readable. `defaultReadObject` still resolves
`java.rmi.MarshalledObject` from the stream's own field descriptor before
dropping the value, and
that class is off the allowlist now. So events written by 2.8.2 to 2.25.x
are rejected. That is a wire break on `2.x`, worth a PMC note rather than
riding in with the
hardening.
And nothing tests the new behaviour. Neither the filtered nested read nor
the fallback to `SimpleMessage` is covered. The regenerated base64 fixture
passes either way, even
with an unfiltered nested stream.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
