AVRO-3985: Apply trusted packages check on SpecificDatumReader(data) constructor (#3330)

jbonofre · web-flow · commit 46ea9330b9e5 · 2025-03-22T03:35:33.000+02:00
diff --git a/lang/java/avro/src/main/java/org/apache/avro/specific/SpecificDatumReader.java b/lang/java/avro/src/main/java/org/apache/avro/specific/SpecificDatumReader.java
@@ -74,6 +74,7 @@ public SpecificDatumReader(Schema writer, Schema reader, SpecificData data) {
   /** Construct given a {@link SpecificData}. */
   public SpecificDatumReader(SpecificData data) {
     super(data);
+    trustedPackages.addAll(Arrays.asList(SERIALIZABLE_PACKAGES));
   }
 
   /** Return the contained {@link SpecificData}. */

Original file line number	Diff line number	Diff line change
`@@ -74,6 +74,7 @@ public SpecificDatumReader(Schema writer, Schema reader, SpecificData data) {`
`74`	`74`	`/** Construct given a {@link SpecificData}. */`
`75`	`75`	`public SpecificDatumReader(SpecificData data) {`
`76`	`76`	`super(data);`
	`77`	`+ trustedPackages.addAll(Arrays.asList(SERIALIZABLE_PACKAGES));`
`77`	`78`	`}`
`78`	`79`
`79`	`80`	`/** Return the contained {@link SpecificData}. */`