Improve diagnostics in SpEL for large array creation #28145
Assignees
Labels
in: core
Issues in core modules (aop, beans, core, context, expression)
status: backported
An issue that has been backported to maintenance branches
type: enhancement
A general enhancement
Milestone
Comments
sbrannen
added
in: core
sbrannen
added a commit
that referenced
this issue
Mar 9, 2022
Attempting to create a large array in a SpEL expression can result in an OutOfMemoryError. Although the JVM recovers from that, the error message is not very helpful to the user. This commit improves the diagnostics in SpEL for large array creation by throwing a SpelEvaluationException with a meaningful error message in order to improve diagnostics for the user. Closes gh-28145
|
Hi @sbrannen Does this address CVE-2022-22963? |
No. That CVE is specific to Spring Cloud Function. See the corresponding blog post for details. |
|
@sbrannen Oh sorry, I meant CVE-2022-22950 in Spring Framework. Does this commit address CVE-2022-22950? |
jhoeller
added
the
for: backport-to-5.2.x
jhoeller
added
status: backported
This was referenced Feb 15, 2023
Open
Open
This was referenced Jun 27, 2023
anfit
pushed a commit
to anfit/spring-framework
that referenced
this issue
Oct 16, 2023
Attempting to create a large array in a SpEL expression can result in an OutOfMemoryError. Although the JVM recovers from that, the error message is not very helpful to the user. This commit improves the diagnostics in SpEL for large array creation by throwing a SpelEvaluationException with a meaningful error message in order to improve diagnostics for the user. Closes spring-projectsgh-28145
anfit
pushed a commit
to anfit/spring-framework
that referenced
this issue
Oct 17, 2023
Attempting to create a large array in a SpEL expression can result in an OutOfMemoryError. Although the JVM recovers from that, the error message is not very helpful to the user. This commit improves the diagnostics in SpEL for large array creation by throwing a SpelEvaluationException with a meaningful error message in order to improve diagnostics for the user. Closes spring-projectsgh-28145
anfit
pushed a commit
to anfit/spring-framework
that referenced
this issue
Oct 17, 2023
Attempting to create a large array in a SpEL expression can result in an OutOfMemoryError. Although the JVM recovers from that, the error message is not very helpful to the user. This commit improves the diagnostics in SpEL for large array creation by throwing a SpelEvaluationException with a meaningful error message in order to improve diagnostics for the user. Closes spring-projectsgh-28145
anfit
pushed a commit
to anfit/spring-framework
that referenced
this issue
Oct 18, 2023
Attempting to create a large array in a SpEL expression can result in an OutOfMemoryError. Although the JVM recovers from that, the error message is not very helpful to the user. This commit improves the diagnostics in SpEL for large array creation by throwing a SpelEvaluationException with a meaningful error message in order to improve diagnostics for the user. Closes spring-projectsgh-28145
This was referenced Jun 6, 2023
Closed
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Attempting to create a large array in a SpEL expression can result in an
OutOfMemoryError. Although the JVM recovers from that, we should throw an exception with a meaningful error message in order to improve diagnostics for the user.The text was updated successfully, but these errors were encountered: