undefect. CWE-407 — 63 sites patched across 27 ecosystems

Authors: russell@unturf.com · brackishbert@gmail.com · foxhop.net · TimeHexOn.com

Patches, unit tests, benchmarks, whitepaper, and outreach briefs.
Public domain — no copyright claimed. Use freely.

test/langtools/tools/javac/ConditionalWithVoid.java

@@ -0,0 +1,20 @@
+/*
+ * @test /nodynamiccopyright/
+ * @bug 4974927 8064464
+ * @summary The compiler was allowing void types in its parsing of conditional expressions.
+ * @author tball
+ *
+ * @compile/fail/ref=ConditionalWithVoid.out -XDrawDiagnostics ConditionalWithVoid.java
+ */
+public class ConditionalWithVoid {
+    public void test(Object o, String s) {
+        // Should fail to compile since Object.wait() has a void return type. Poly case.
+        System.out.println(o instanceof String ? o.hashCode() : o.wait());
+        // Should fail to compile since Object.wait() has a void return type. Standalone case.
+        (o instanceof String ? o.hashCode() : o.wait()).toString();
+        // Should fail to compile since Object.wait() has a void return type. Poly case.
+        System.out.println(switch (s) {case "" -> o.hashCode(); default -> o.wait();});
+        // Should fail to compile since Object.wait() has a void return type. Standalone case.
+        (switch (s) {case "" -> o.hashCode(); default -> o.wait();}).toString();
+    }
+}