Jackson Release 2.9.9

Jump to bottom

Tatu Saloranta edited this page Mar 4, 2021 · 36 revisions

Patch version of 2.9, released on May 16th 2019.

Following fixes are included.

Changes, core

Streaming

#516: _inputPtr off-by-one in UTF8StreamJsonParser._parseNumber2()
#531: Non-blocking parser reports incorrect locations when fed with non-zero offset

Databind

#1408: Call to TypeVariable.getBounds() without synchronization unsafe on some platforms
#2221: DeserializationProblemHandler.handleUnknownTypeId() returning Void.class, enableDefaultTyping causing NPE
#2251: Getter that returns an abstract collection breaks a delegating @JsonCreator
#2265: Inconsistent handling of Collections$UnmodifiableList vs Collections$UnmodifiableRandomAccessList
#2299: Fix for using jackson-databind in an OSGi environment under Android
#2303: Deserialize null, when java type is "TypeRef of TypeRef of T", does not provide "Type(Type(null))"
#2324: StringCollectionDeserializer fails with custom collection
#2326: Block one more gadget type (CVE-2019-12086)

Changes, data formats

Binary

#155: (multiple) Inconsistent support for StreamWriteFeature.FLUSH_PASSED_TO_STREAM
#159: (cbor) Use of longer-than-optimal encoding for String lengths

CSV

#122: readValues(null) causes infinite loop
#124: Add CsvGenerator.Feature.ESCAPE_CONTROL_CHARS_WITH_ESCAPE_CHAR for escaping non-printable characters in CSV output/input

XML

#333: OutputDecorator not called with XmlMapper

YAML

#63: null Object Id serialized as anchor for YAML
#68: When field names are reserved words, they should be written out with quotes
#90: Exception when decoding Jackson-encoded Base64 binary value in YAML
#123: YAML Anchor, reference fails with simple example

Changes, datatypes

Guava

#45: HostAndPortDeserializer rely on older version property name

json-org

#15: Misleading exception when trying to deserialize JSON String as org.json.JSONArray value

Changes, other modules

Afterburner

#49: Afterburner MyClassLoader#loadAndResolve() is not idempotent when tryToUseParent is true
#69: ALLOW_COERCION_OF_SCALARS ignored deserializing scalars with Afterburner

Mr Bean

#74: MrBean module should not materialize java.io.Serializable

Changes, jackson-jr

Fix an issue with Maps-of-Lists, Lists-of-Maps