On Wed, 27 May 2026 14:38:44 GMT, Chen Liang <[email protected]> wrote:

>> ReflectionFactory.newConstructorForSerializatoin might bypass strict 
>> initialization. We should make sure the skipped classes in the constructor 
>> chain do not declare strict instance fields.
>> 
>> This updates the specification of jdk.unsupported's ReflectionFactory to 
>> reflect this behavioral update.
>> 
>> ---------
>> - [x] I confirm that I make this contribution in accordance with the 
>> [OpenJDK Interim AI Policy](https://openjdk.org/legal/ai).
>
> Chen Liang has updated the pull request with a new target base due to a merge 
> or a rebase. The incremental webrev excludes the unrelated changes brought in 
> by the merge/rebase. The pull request contains five additional commits since 
> the last revision:
> 
>  - Review comments
>  - Merge branch 'lworld' of https://github.com/openjdk/valhalla into 
> fix/reflect-factory-strict
>  - Further cleanup
>  - Merge branch 'lworld' of https://github.com/openjdk/valhalla into 
> fix/reflect-factory-strict
>  - Prevent reflection factory hacking strict init

I've had a look over this PR, but I think it would be good to have an expert 
like @stuart-marks look at it as well.

-------------

PR Comment: https://git.openjdk.org/valhalla/pull/2350#issuecomment-4622096206

Reply via email to