Releases: RuedigerMoeller/fast-serialization
Releases · RuedigerMoeller/fast-serialization
bugfixes
security fix
- adds a new class designed to block a recent serialization security exploit. see http://java-is-the-new-c.blogspot.de/2015/11/clarification-and-fix-for-serialization.html
bugfixes
- fixed wrong license in pom (fst is APL)
- minor fixes to work again with fast-cast 3 (structs broken since 2.30)
- minor fix in json codec
minor bugfixes
bugfix issu85
- fixed a severe error on BinaryQueue occuring with bytewise usage
- minor additions
offheap map fix
- off heap map could segfault with large keys and specific operations sequences. Fixed that by moving the index on-heap (so keys are on heap, values are offheap). Keys will get stored offheap in a future version again.
minor fixes + additions
- new method for input stream reuse (with copy) reuse at FSTConfiguration
- fixed a kson instantiation bug causing uninitialized default values
Important Fix
- introduced a rare concurrency issue when reducing footprint in 2.3x. Fixed that.
If you are in production consider an update or setFSTClazzInfo.BufferFieldMeta
to false in your main(). If the flag does not exist in your version, you are not affected. - fixed Issue #80
- added ConcurrentModification detection when iterating offheap map
minor enhancements
- JSON: in case arbitrary json (not produced by fst serialization) is decoded, fall back to nested structures of "Unknown" instances upon deserialization
relaxed access modifiers
- made some stuff protected to ease tweaking and overriding