On Wed, 27 May 2026 14:38:44 GMT, Chen Liang <[email protected]> wrote:
>> ReflectionFactory.newConstructorForSerializatoin might bypass strict >> initialization. We should make sure the skipped classes in the constructor >> chain do not declare strict instance fields. >> >> This updates the specification of jdk.unsupported's ReflectionFactory to >> reflect this behavioral update. >> >> --------- >> - [x] I confirm that I make this contribution in accordance with the >> [OpenJDK Interim AI Policy](https://openjdk.org/legal/ai). > > Chen Liang has updated the pull request with a new target base due to a merge > or a rebase. The incremental webrev excludes the unrelated changes brought in > by the merge/rebase. The pull request contains five additional commits since > the last revision: > > - Review comments > - Merge branch 'lworld' of https://github.com/openjdk/valhalla into > fix/reflect-factory-strict > - Further cleanup > - Merge branch 'lworld' of https://github.com/openjdk/valhalla into > fix/reflect-factory-strict > - Prevent reflection factory hacking strict init @liach I've reviewed this PR, and have no further comments at this time. It would be beneficial to have another Core Libraries reviewer chime in here as well, maybe @AlanBateman might be able to give a second opinion. ------------- PR Comment: https://git.openjdk.org/valhalla/pull/2350#issuecomment-4632332500
