In 2008, a missing dot over the letter “i” in an SMS led to the deaths of two people. The same mechanism — Turkish case mapping — has crashed Gson, Hibernate, Gradle and Spark. These are not theoretical curiosities: every example in this talk is a real bug from a public issue tracker or a published CVE. You’ll see how seemingly trivial string operations — changing case, comparing, slicing, measuring length — can behave completely differently from what intuition suggests, and how that ends in real outages and security vulnerabilities. All based on examples from popular languages and libraries of the JVM ecosystem.
Stringi gryzą — Unicode w praktyce JVM
Real-world bugs and CVEs caused by seemingly trivial string operations — case conversion, comparison, slicing and length measurement — across the JVM ecosystem.
Event link (opens in a new window)