Add additional checks in ObjectInputStream for serialization of objects. Delayed static initialization of classes until the type of the class has been validated against the stream in some cases. Bug: 15874291; change-Id: I0f0fe68e0d21e041c5160482113ae847c357b8f5. Bug was reported by Jann Horn for reporting a bug in Object inputStream and sending the initial patch to the public domain. Add additional tests to the Object input stream.”]
Source: https://android.googlesource.com/platform/libcore/+/738c833d38d41f8f76eb7e77ab39add82b1ae1e2