jackson-databind/CVE-2019-16335.patch
2020-09-20 00:02:00 +08:00

26 lines
1.1 KiB
Diff

From 73c1c2cc76e6cdd7f3a5615cbe3207fe96e4d3db Mon Sep 17 00:00:00 2001
From: Tatu Saloranta <tatu.saloranta@iki.fi>
Date: Thu, 12 Sep 2019 13:06:31 -0700
Subject: [PATCH] Fix #2449
---
.../jackson/databind/jsontype/impl/SubTypeValidator.java | 2 ++
1 files changed, 2 insertions(+)
diff --git a/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java b/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java
index 0abadfdf3..31f070ce5 100644
--- a/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java
+++ b/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java
@@ -98,6 +98,8 @@ public class SubTypeValidator
// [databind#2410]: HikariCP/metricRegistry config
s.add("com.zaxxer.hikari.HikariConfig");
+ // [databind#2449]: and sub-class thereof
+ s.add("com.zaxxer.hikari.HikariDataSource");
// [databind#2420]: CXF/JAX-RS provider/XSLT
s.add("org.apache.cxf.jaxrs.provider.XSLTJaxbProvider");
--
2.23.0