undefect. CWE-407 — 63 sites patched across 27 ecosystems

Authors: russell@unturf.com · brackishbert@gmail.com · foxhop.net · TimeHexOn.com

Patches, unit tests, benchmarks, whitepaper, and outreach briefs.
Public domain — no copyright claimed. Use freely.

test/langtools/tools/javac/cast/BoxedArray.java

@@ -0,0 +1,15 @@
+/*
+ * @test /nodynamiccopyright/
+ * @bug 5014309
+ * @summary REGRESSION: compiler allows cast from Integer[] to int[]
+ * @author gafter
+ *
+ * @compile/fail/ref=BoxedArray.out -XDrawDiagnostics  BoxedArray.java
+ */
+
+public class BoxedArray {
+    int[] a2;
+    void f(Integer[] a1) {
+        a2 = (int[]) a1;
+    }
+}