How do the array length limits work? For example, consider:
int[][][] myArray = new int[1000][1000][1000];
Or the equivalent initialization done in loops in a constructor?
Patricia
On 2/11/2015 3:57 AM, Peter Firmstone wrote:
...
It appears that fixing ObjectInputStream and Serializable security
issues was much easier than expected, provided we're prepared to
implement atomic invariant validation and give up some functionality:
1. Circular references
2. Limits on object cache size and periodically calling reset()
3. Limits on array lengths.
4. Classes that don't implement Serializable's readObject() method
safely.
...