On Tue, 19 Aug 2025 15:20:52 GMT, Guanqiang Han <g...@openjdk.org> wrote:

>> Validate class name length immediately after GetStringUTFLength() in 
>> Class.forName0. This prevents potential issues caused by overly long class 
>> names before they reach later code that would reject them, throwing 
>> ClassNotFoundException early.
>
> Guanqiang Han has updated the pull request incrementally with one additional 
> commit since the last revision:
> 
>   Update Class.java
>   
>   correct length of class name

It is up to core-libs folk but to me that seems far too heavyweight to have on 
the Java side, and we are then going to repeat some of it in the C code.

-------------

PR Review: https://git.openjdk.org/jdk/pull/26802#pullrequestreview-3134128473

Reply via email to