4 ms·
The JRE has had arbitrary code execution attacks on serialization. The leaked classes eventually invoke a class loader and instantiate your binary code as a new
by dwaite 8y ago
The JRE has had arbitrary code execution attacks on serialization. The leaked classes eventually invoke a class loader and instantiate your binary code as a new java class.
- bitL 8y agoDoes the serialization work with bytecode though? Doesn't it stream just data members, not method implementations?