[jboss-jira] [JBoss JIRA] (ELY-961) Coverity: Incorrect definition of RawKey as a parent of Serializable classes
Ilia Vassilev (JIRA)
issues at jboss.org
Tue Feb 14 12:57:00 EST 2017
[ https://issues.jboss.org/browse/ELY-961?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Ilia Vassilev moved WFLY-7967 to ELY-961:
-----------------------------------------
Project: WildFly Elytron (was: WildFly)
Key: ELY-961 (was: WFLY-7967)
Component/s: (was: Security)
> Coverity: Incorrect definition of RawKey as a parent of Serializable classes
> ----------------------------------------------------------------------------
>
> Key: ELY-961
> URL: https://issues.jboss.org/browse/ELY-961
> Project: WildFly Elytron
> Issue Type: Bug
> Affects Versions: 1.1.0.Beta24
> Reporter: Martin Choma
> Assignee: Ilia Vassilev
>
> There are some Serializable classes, which extends from RawKey, which is not Serializable.
> * RawRSAPrivateKey
> * RawDHPrivateKey
> * RawPBEKey
> * RawECPrivateKey
> * RawDSAPrivateKey
> Either mark RawKey as Serializable as well or if this is not desired, provide no-args constructor in RawKey class, as javadoc describes:
> ??During deserialization, the fields of non-serializable classes will be initialized using the public or protected no-arg constructor of the class. A no-arg constructor must be accessible to the subclass that is serializable. The fields of serializable subclasses will be restored from the stream. [1]??
> [1] http://docs.oracle.com/javase/8/docs/api/java/io/Serializable.html
> https://scan7.coverity.com/reports.htm#v23632/p11778/fileInstanceId=8553919&defectInstanceId=2138989&mergedDefectId=1377488
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
More information about the jboss-jira
mailing list