[ 
https://issues.apache.org/jira/browse/COLLECTIONS-721?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16891559#comment-16891559
 ] 

Yoshiyuki Ohtake commented on COLLECTIONS-721:
----------------------------------------------

InvokerTransformerクラスからSerializableの実装を外したことが原因です。
JavaDocコメントでは脆弱性対応のためとあります。

> functors.InvokerTransformer backward incompatibility bug
> --------------------------------------------------------
>
>                 Key: COLLECTIONS-721
>                 URL: https://issues.apache.org/jira/browse/COLLECTIONS-721
>             Project: Commons Collections
>          Issue Type: Bug
>    Affects Versions: 4.1, 4.2, 4.3
>            Reporter: xia0c
>            Priority: Major
>              Labels: performance
>
> The following code snippets throw a NotSerializableException. It works well 
> before commons-collections4 4.0 and commons-collection3. When I update it to 
> 4.1 or newer versions, it failed.
> {code:java}
>       @Test
>       public void Demo() throws IOException{
>               InvokerTransformer transformer = new 
> InvokerTransformer("toString", new Class[]{}, new Object[]{});
>         Queue priorityQueue = new PriorityQueue(2, new 
> TransformingComparator(transformer));
>         priorityQueue.add(1);
>         
>         ByteArrayOutputStream bout = new ByteArrayOutputStream();
>         ObjectOutputStream out = new ObjectOutputStream(bout);
>         out.writeObject(priorityQueue);
>               
>               }
> {code}



--
This message was sent by Atlassian JIRA
(v7.6.14#76016)

Reply via email to