SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Title: SER09-J. Do not invoke overridable methods from the readObject() method  
Author: Dhruv Mohindra Oct 09, 2009
Last Changed by: David Svoboda Aug 06, 2025
Tiny Link: (useful for email) https://wiki.sei.cmu.edu/confluence/x/5jdGBQ
Export As: Word · PDF  
Hierarchy
Parent Page
    Page: Rule 14. Serialization (SER)
Labels
Global Labels (5)
Recent Changes
Time Editor  
Aug 06, 2025 17:02 David Svoboda View Changes
REM cost reform
May 18, 2021 08:48 Michal Rozenau View Changes
Parasoft Jtest 2021.1
Feb 26, 2021 09:48 Michal Rozenau View Changes
Parasoft Jtest 2020.2
Sep 16, 2016 11:00 Will Snavely View Changes
Feb 02, 2016 14:48 Sandy Shrum  
Outgoing Links
External Links (1)
    www.oracle.com/technetwork/java/seccodeguide-139067.html
SEI CERT Oracle Coding Standard for Java (8)     Page: Parasoft_V
    Page: Rule 14. Serialization (SER)
    Page: MET06-J. Do not invoke overridable methods in clone()
    Page: SER10-J. Avoid memory and resource leaks during serialization
    Page: Parasoft
    Page: SER08-J. Minimize privileges before deserializing from a privileged context
    Page: Rule AA. References
    Home page: SEI CERT Oracle Coding Standard for Java