JDK-8193788 : Release Note: RMI Registry Filter Allows Binding Arrays of Any Type
- Type: Sub-task
- Component: core-libs
- Sub-Component: java.rmi
- Affected Version: 7u161,8u152,8u162,10
- Priority: P3
- Status: Closed
- Resolution: Delivered
- OS: generic
- CPU: generic
- Submitted: 2017-12-19
- Updated: 2019-04-09
- Resolved: 2017-12-19
The Version table provides details related to the release that this issue/RFE will be addressed.
Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.
To download the current JDK release, click here.
Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.
To download the current JDK release, click here.
| JDK 10 | JDK 7 | JDK 8 |
|---|---|---|
10Resolved  |
7u161Resolved | 8u152Resolved |
Description
The RMI Registry built-in serial filter has been modified to check only the array size and not the component type. The maximum array size has been increased to 1,000,000. The override filter can be used to decrease the limit. Array sizes greater than the maxarray limit will be rejected. Sizes less than the maxarray limit will be allowed. The `java.security` file contains more information about the `sun.rmi.registry.registryFilter` property and the `conf/security/java.security` configuration file has been updated to better describe the default behavior and how to override it.