Hand-rolling the JNDI Reference: what the JVM actually deserializes 0 ▲ chs.us — Carl Sampson 4 hours ago · Tech · hide · 0 comments How a Log4Shell-style LDAP/RMI callback returns a javax.naming.Reference, byte for byte — and two serialization bugs that only a real JVM catches. No comments yet. Log in to reply on the Fediverse. Comments will appear here.
