From 7fec9a77741fc2c23a65904b41392e903bfd3489 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?JB=20Onofr=C3=A9?= Date: Mon, 3 Mar 2025 18:18:05 +0100 Subject: [PATCH] AVRO-3985: Apply trusted packages check on SpecificDatumReader(data) constructor --- .../main/java/org/apache/avro/specific/SpecificDatumReader.java | 1 + 1 file changed, 1 insertion(+) diff --git a/lang/java/avro/src/main/java/org/apache/avro/specific/SpecificDatumReader.java b/lang/java/avro/src/main/java/org/apache/avro/specific/SpecificDatumReader.java index e782c58c867..29c8ac66567 100644 --- a/lang/java/avro/src/main/java/org/apache/avro/specific/SpecificDatumReader.java +++ b/lang/java/avro/src/main/java/org/apache/avro/specific/SpecificDatumReader.java @@ -74,6 +74,7 @@ public SpecificDatumReader(Schema writer, Schema reader, SpecificData data) { /** Construct given a {@link SpecificData}. */ public SpecificDatumReader(SpecificData data) { super(data); + trustedPackages.addAll(Arrays.asList(SERIALIZABLE_PACKAGES)); } /** Return the contained {@link SpecificData}. */