[jira] [Commented] (RNG-120) Fix security issues in serialization code for Random instances

2019-10-01 Thread Alex Herbert (Jira)
[ https://issues.apache.org/jira/browse/RNG-120?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16942109#comment-16942109 ] Alex Herbert commented on RNG-120: -- {quote}But how can one be sure? {quote} I suppose you can be sure if

[jira] [Commented] (RNG-120) Fix security issues in serialization code for Random instances

2019-10-01 Thread Gilles Sadowski (Jira)
[ https://issues.apache.org/jira/browse/RNG-120?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16942078#comment-16942078 ] Gilles Sadowski commented on RNG-120: - bq. Yes. You can use them if you are sure that the object that

[jira] [Commented] (RNG-120) Fix security issues in serialization code for Random instances

2019-10-01 Thread Alex Herbert (Jira)
[ https://issues.apache.org/jira/browse/RNG-120?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16941766#comment-16941766 ] Alex Herbert commented on RNG-120: -- {quote}Is there any correct use for methods writeObject and readObject?

[jira] [Commented] (RNG-120) Fix security issues in serialization code for Random instances

2019-09-30 Thread Gilles Sadowski (Jira)
[ https://issues.apache.org/jira/browse/RNG-120?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16941413#comment-16941413 ] Gilles Sadowski commented on RNG-120: - Is there any correct use for methods {{writeObject}} and