<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
On 21/02/2019 17:41, Brian Burkhalter wrote:<br>
<blockquote type="cite"
cite="mid:EDEA634E-2EA9-4324-85F5-5C87B1D4D74E@oracle.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<br class="">
<div>
<blockquote type="cite" class="">
<div class=""><span style="caret-color: rgb(0, 0, 0);
font-family: Helvetica; font-size: 12px; font-style:
normal; font-variant-caps: normal; font-weight: normal;
letter-spacing: normal; text-align: start; text-indent:
0px; text-transform: none; white-space: normal;
word-spacing: 0px; -webkit-text-stroke-width: 0px;
text-decoration: none; float: none; display: inline
!important;" class="">There are a few other places in the
heap buffers that also need to be hardened a bit (direct
buffers of course need to much more careful).</span></div>
</blockquote>
</div>
<br class="">
<div class="">Shall I try to include fixing those in this patch?</div>
<br>
</blockquote>
Probably best to do it as a separate issue. I try to watch for these
things with direct buffer classes as these could lead to any number
of VM crashes or security issues. It's a less of concern with the
heap buffers but would be good to fix if you have cycles.<br>
<br>
-Alan<br>
</body>
</html>