Comments on: How Boring Flaws Become Interesting http://www.veracode.com/blog/2009/01/how-boring-flaws-become-interesting/ Application security testing, analysis, and metrics Thu, 09 Feb 2012 11:59:00 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Chris Eng http://www.veracode.com/blog/2009/01/how-boring-flaws-become-interesting/comment-page-1/#comment-5791 Chris Eng Tue, 14 Dec 2010 22:31:33 +0000 http://www.veracode.com/blog/?p=623#comment-5791 @Eric: No idea what happened in 1.5. Download the source and report back! :) @Eric: No idea what happened in 1.5. Download the source and report back! :)

]]> By: Eric Anderson http://www.veracode.com/blog/2009/01/how-boring-flaws-become-interesting/comment-page-1/#comment-5790 Eric Anderson Tue, 14 Dec 2010 19:52:28 +0000 http://www.veracode.com/blog/?p=623#comment-5790 Was this bug ever fixed in the 1.5 series? The above links don't work. Was this bug ever fixed in the 1.5 series? The above links don’t work.

]]> By: Chris Eng http://www.veracode.com/blog/2009/01/how-boring-flaws-become-interesting/comment-page-1/#comment-2459 Chris Eng Wed, 21 Jan 2009 20:03:29 +0000 http://www.veracode.com/blog/?p=623#comment-2459 @Kamper: Ha! I didn't even realize the source was packaged with the JDK -- figured it would have been a separate download. I guess I'm just so used to going the decompilation route that I didn't think to look for source. Things like the StringBuilder expression are so familiar looking at this point that I don't even notice them. That being said, next time I'll probably remember that the source is available. :> @Kamper:

Ha! I didn’t even realize the source was packaged with the JDK — figured it would have been a separate download. I guess I’m just so used to going the decompilation route that I didn’t think to look for source. Things like the StringBuilder expression are so familiar looking at this point that I don’t even notice them. That being said, next time I’ll probably remember that the source is available. :>

]]> By: Kamper http://www.veracode.com/blog/2009/01/how-boring-flaws-become-interesting/comment-page-1/#comment-2458 Kamper Wed, 21 Jan 2009 18:40:10 +0000 http://www.veracode.com/blog/?p=623#comment-2458 Any particular reason you decompiled the binary rather than just looking at the source that's included with jdk? That way you get comments (although in this particular case, there aren't any), meaningful variable names and more readable things like string concatenation. That StringBuilder expression is actually just "prefix + Long.toString(n) + suffix". Any particular reason you decompiled the binary rather than just looking at the source that’s included with jdk? That way you get comments (although in this particular case, there aren’t any), meaningful variable names and more readable things like string concatenation. That StringBuilder expression is actually just “prefix + Long.toString(n) + suffix”.

]]>