Another class filtering fix

2026-03-20 15:41:04 +01:00
parent 35b8acb52a
commit 1fd6240d09
1 changed files with 2 additions and 1 deletions
@@ -258,7 +258,8 @@ public class ObjectInputStream extends DataInputStream
                checkName = checkName.substring(1, checkName.length() - 1);
            }

-            boolean allowed = false;
+            // primitive array descriptors (I, Z, B, S, C, J, F, D) are always safe
+            boolean allowed = (checkName.length() == 1);
            for (String prefix : _allowedPrefixes) {
                if (checkName.startsWith(prefix)) {
                    allowed = true;