commit 738c833d38d41f8f76eb7e77ab39add82b1ae1e2
author Neil Fuller <nfuller@google.com> Wed Jun 25 17:54:12 2014 +0100
committer Neil Fuller <nfuller@google.com> Mon Jun 30 12:59:01 2014 +0100
tree 9b68f1d0ab239501f209cc3af498b833f6e5e116
parent aff7ffc8614d439740e2b4d692925e6712015f43

Add additional checks in ObjectInputStream

Thanks to Jann Horn for reporting a bug in ObjectInputStream
and sending the initial patch.

Add some checks that the class of an object
being deserialized still conforms to the requirements
for serialization.

Add some checks that the class being deserialized matches
the type information (enum, serializable, externalizable)
held in the stream.

Delayed static initialization of classes until the
type of the class has been validated against the stream
content in some cases.

Added more tests.

Bug: 15874291
Change-Id: I0f0fe68e0d21e041c5160482113ae847c357b8f5