improved checkAutoType.

alibaba · Jan 1, 2018 · 5501d48 · 5501d48
1 parent 6d56d0e
commit 5501d48
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/src/main/java/com/alibaba/fastjson/parser/ParserConfig.java b/src/main/java/com/alibaba/fastjson/parser/ParserConfig.java
@@ -300,11 +300,19 @@ public Class<?> checkAutoType(String typeName, Class<?> expectClass, int feature
             return null;
         }
 
-        if (typeName.length() >= 128) {
+        if (typeName.length() >= 128 || typeName.length() < 3) {
             throw new JSONException("autoType is not support. " + typeName);
         }
 
-        long hashCode = 0xcbf29ce484222325L;
+        final long BASIC = 0xcbf29ce484222325L;
+        final long PRIME = 0x100000001b3L;
+
+        final long h1 = (BASIC ^ typeName.charAt(0)) * PRIME;
+        if (h1 == 0xaf64164c86024f1aL) { // [
+            throw new JSONException("autoType is not support. " + typeName);
+        }
+
+        long hashCode = BASIC;
         for (int i = 0; i < typeName.length(); ++i) {
             char c = typeName.charAt(i);
             hashCode ^= c;