Details
-
Bug
-
Status: Resolved
-
Resolution: Done
-
None
-
None
-
None
-
None
-
Operating System: All
Platform: All
-
6979
Description
This class has realChildSchemas field, which is initialized to the collection passed by the caller, some of whom use a HashSet.
This means a mutable collection is leaked through getChildNodes(), allowing modification.
This may be intentional or it may be a bug – analyze callers and make sure we either copy the Set or wrap it in Unmodifiable collection. Also address the FIXME at the top of the class, as the subclasses do not seem to exist.