Skip to content

Jackson Release 2.9.9

Jump to bottom
Tatu Saloranta edited this page Mar 4, 2021 · 36 revisions

Patch version of 2.9, released on May 16th 2019.

Following fixes are included.

Changes, core

Streaming

  • #516: _inputPtr off-by-one in UTF8StreamJsonParser._parseNumber2()
  • #531: Non-blocking parser reports incorrect locations when fed with non-zero offset

Databind

  • #1408: Call to TypeVariable.getBounds() without synchronization unsafe on some platforms
  • #2221: DeserializationProblemHandler.handleUnknownTypeId() returning Void.class, enableDefaultTyping causing NPE
  • #2251: Getter that returns an abstract collection breaks a delegating @JsonCreator
  • #2265: Inconsistent handling of Collections$UnmodifiableList vs Collections$UnmodifiableRandomAccessList
  • #2299: Fix for using jackson-databind in an OSGi environment under Android
  • #2303: Deserialize null, when java type is "TypeRef of TypeRef of T", does not provide "Type(Type(null))"
  • #2324: StringCollectionDeserializer fails with custom collection
  • #2326: Block one more gadget type (CVE-2019-12086)

Changes, data formats

Binary

  • #155: (multiple) Inconsistent support for StreamWriteFeature.FLUSH_PASSED_TO_STREAM
  • #159: (cbor) Use of longer-than-optimal encoding for String lengths

CSV

  • #122: readValues(null) causes infinite loop
  • #124: Add CsvGenerator.Feature.ESCAPE_CONTROL_CHARS_WITH_ESCAPE_CHAR for escaping non-printable characters in CSV output/input

XML

  • #333: OutputDecorator not called with XmlMapper

YAML

  • #63: null Object Id serialized as anchor for YAML
  • #68: When field names are reserved words, they should be written out with quotes
  • #90: Exception when decoding Jackson-encoded Base64 binary value in YAML
  • #123: YAML Anchor, reference fails with simple example

Changes, datatypes

Guava

  • #45: HostAndPortDeserializer rely on older version property name

json-org

  • #15: Misleading exception when trying to deserialize JSON String as org.json.JSONArray value

Changes, other modules

Afterburner

  • #49: Afterburner MyClassLoader#loadAndResolve() is not idempotent when tryToUseParent is true
  • #69: ALLOW_COERCION_OF_SCALARS ignored deserializing scalars with Afterburner

Mr Bean

  • #74: MrBean module should not materialize java.io.Serializable

Changes, jackson-jr

  • Fix an issue with Maps-of-Lists, Lists-of-Maps

Clone this wiki locally