Mantis - Hessian
Viewing Issue Advanced Details
3357 major always 02-26-09 07:31 12-16-09 16:36
oehmiche  
ferg  
normal  
closed 3.2.1  
fixed  
none    
none 4.0.3  
0003357: NPE on deserialization if default constructor is missing
For classes without default constructor an arbitrary constructor is called with null-arguments when deserializing the class. The given properties will be set be introspection afterwards.

If the called constructor performs any actions with the given parameters a nullpointer may occur.

For an example see the attached java file.

Using the java deserializing mechanismen everything goes fine.



 HessianExceptionTest.java [^] (1,286 bytes) 02-26-09 07:31

Notes
(0004345)
ferg   
12-16-09 16:36   
hessian/3b4h