Re: question about serialization

[Mark Wielaard]

Hi,

On Tue, 2003-08-05 at 20:50, Tom Tromey wrote:
> I assume you are doing this because your Class implementation caches
> the Field and Method objects.  I don't think that is valid.  If we
> call setAccessible on a Method, then even if we reset it we are
> opening up a window where other unprivileged code could access that
> Method.  This can only happen in the serialization code if Class
> returns the same Method or Field object to other callers.

It is not valid, but the vm reference classes of GNU Classpath do
suggest this wrong optimization. I just added a couple of tests to Mauve
to check that this optimization isn't made.

Cheers,

Mark