JProfiler Get rid of your performance problems and memory leaks! Modern Garbage Collection Tuning Java Performance Training Courses COURSES AVAILABLE NOW. We can provide training courses to handle all your Java performance needs Java Performance Tuning, 2nd ed The classic and most comprehensive book on tuning Java Java Performance Tuning Newsletter Your source of Java performance news. Subscribe now! Enter email: Training online Threading Essentials course JProfiler Get rid of your performance problems and memory leaks!

Back to newsletter 249 contents

https://openjdk.java.net/jeps/290
Filter Incoming Serialization Data(Page last updated May 2021, Added 2021-08-29, Author Roger Riggs, Publisher OpenJDK). Tips:

• Use property "jdk.serialFilter" to specify classes that can be deserialized, and the size limits allowed, eg jdk.serialFilter=!example.somepackage.SomeClass;example.somepackage.*;!*; maxarray=1000;maxdepth=10;maxrefs=30;maxbytes=100000 would allow only classes in example.somepackage to be deserialized, except for example.somepackage.SomeClass, and in addition would not allow an object to be deserialized if it exceeded any of the limits (eg more than 100 000 bytes).

https://bugs.openjdk.java.net/browse/JDK-8267077
Unified Logging Supports Asynchronous Log Flushing(Page last updated August 2021, Added 2021-08-29, Author David Holmes, Publisher OpenJDK). Tips:

• To enable asynchronous logging of the JVM logs, use -Xlog:async and if you need to configure the logging buffer size, use eg -XX:AsyncLogBufferSize=1M (there is a dedicated thread for flushing the buffer).

https://openjdk.java.net/jeps/415
Context-Specific Deserialization Filters(Page last updated August 2021, Added 2021-08-29, Author Roger Riggs, Publisher OpenJDK). Tips:

• A global deserialization filter can be set with the property "jdk.serialFilter". This JEP enables context specific deserialization filters to be used. Essentially you would create a filter filter = ObjectInputFilter.Config.createFilter(...) then before you read in any object with your ObjectInputStream instance, you would first call ois.setObjectInputFilter(filter).

Jack Shirazi Back to newsletter 249 contents