Overflow in Collections.rotate
summary
The talk describes a 22-year integer-overflow bug in java.util.Collections.rotate that affected arrays larger than 2^30 elements and existed in OpenJDK and all Java versions up to 21. It explains how the defect was found accidentally while running student lab tests, and traces the process of reporting the bug and getting the fix committed into the OpenJDK master branch.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 1:31What is Collections.rotate
- 10:48Java rotate implementation
- 23:46JDK bug hunt
- 30:13Bug in rotate found
- 34:33Fix and patch submission
- 40:13Results and summary
related talks
42mHow a Two-Decade-Old Issue Still Haunts Software Scalability
56mThe Anatomy of Java Vulnerabilities
50mKnow Your Java
02h 27mEscape from the Planet of the Collections
52mJava 9: The Quest for Very Large Heaps
01h 00mon Java - Historical Oddities & Persistent Itches
45mUnlocking Java's Code Maze
49mTrash Talk: Exploring the JVM memory management