On 30/01/2014 13:05, Sergey Bylokhov wrote:
It seems to me that in this fix we actually suppress a bugs. These
classes can be extended from the public classes, and can be assigned to
the parent.
If serialization of these classes are not supported, we should block it
via readObject+writeObject with assertion error, if it is supported it
should be implemented.

+ readObjectNoData. Correctly spelt serialPersistenFields as an array containing null appeared to be most effective, though implementation dependent.

Really the legacy serialisation mechanism should be extended with a @NotActuallySerializable annotation. Apply that to sun.swing.-, com.sun.swing.-, javax.swing.- and others.

Tom

Reply via email to