[
https://issues.jboss.org/browse/WFLY-7967?page=com.atlassian.jira.plugin....
]
Martin Choma updated WFLY-7967:
-------------------------------
Description:
There are some Serializable classes, which extends from RawKey, which is not
Serializable.
* RawRSAPrivateKey
* RawDHPrivateKey
* RawPBEKey
* RawECPrivateKey
* RawDSAPrivateKey
Either mark RawKey as Serializable as well or if this is not desired, provide no-args
constructor in RawKey class, as javadoc describes:
??During deserialization, the fields of non-serializable classes will be initialized using
the public or protected no-arg constructor of the class. A no-arg constructor must be
accessible to the subclass that is serializable. The fields of serializable subclasses
will be restored from the stream. [1]??
[1]
http://docs.oracle.com/javase/8/docs/api/java/io/Serializable.html
https://scan7.coverity.com/reports.htm#v23632/p11778/fileInstanceId=85539...
was:
There are some Serializable classes, which extends from RawKey, which is not
Serializable.
* RawRSAPrivateKey
* RawDHPrivateKey
* RawPBEKey
* RawECPrivateKey
* RawDSAPrivateKey
Either mark RawKey as Serializable as well or if this is not desired, provide no-args
constructor in RawKey class, as javadoc describes:
During deserialization, the fields of non-serializable classes will be initialized using
the public or protected no-arg constructor of the class. A no-arg constructor must be
accessible to the subclass that is serializable. The fields of serializable subclasses
will be restored from the stream. [1]
[1]
http://docs.oracle.com/javase/8/docs/api/java/io/Serializable.html
https://scan7.coverity.com/reports.htm#v23632/p11778/fileInstanceId=85539...
Coverity: Incorrect definition of RawKey as a parent of Serializable
classes
----------------------------------------------------------------------------
Key: WFLY-7967
URL:
https://issues.jboss.org/browse/WFLY-7967
Project: WildFly
Issue Type: Bug
Components: Security
Reporter: Martin Choma
Assignee: Ilia Vassilev
There are some Serializable classes, which extends from RawKey, which is not
Serializable.
* RawRSAPrivateKey
* RawDHPrivateKey
* RawPBEKey
* RawECPrivateKey
* RawDSAPrivateKey
Either mark RawKey as Serializable as well or if this is not desired, provide no-args
constructor in RawKey class, as javadoc describes:
??During deserialization, the fields of non-serializable classes will be initialized
using the public or protected no-arg constructor of the class. A no-arg constructor must
be accessible to the subclass that is serializable. The fields of serializable subclasses
will be restored from the stream. [1]??
[1]
http://docs.oracle.com/javase/8/docs/api/java/io/Serializable.html
https://scan7.coverity.com/reports.htm#v23632/p11778/fileInstanceId=85539...
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)