Android - JAVA Denial of Service: Parse Double -


there vulnerability in implementations of java.lang.double.parsedouble() , related methods can cause thread hang when parsing number in range

[2^(-1022) - 2^(-1075) : 2^(-1022) - 2^(-1076)] 

this not issue when using java version 6 update 24 or later.

so in order develop secure android application, enough make sure apk built on using jdk version 1.6u24 , above? or, issue related android dalvik vm?

please in clarifying might have misconceptions.

the buid version of java byte code irrelevant, long execution done on jvm new parsedouble, or on dalvik vm, not know of having flaw. is, parsedouble code runtime library, not part of code.

the bug hangs app (critical), not security risk such.


Comments

Popular posts from this blog

Perl - how to grep a block of text from a file -

delphi - How to remove all the grips on a coolbar if I have several coolbands? -

javascript - Animating array of divs; only the final element is modified -