Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Wiki Markup
In this example, the program needs more memory on the heap than is available by default. In a server-class machine running either VM (client or server) with a parallel garbage collector, the default initial and maximum heap sizes are as follows for J2SE 56.0 \[1[[Sun 06|AA. Java References#Sun 06]\]:

  • initial heap size: larger of 1/64th of the machine's physical memory on the machine or some reasonable minimum

...

In the case of the heap size being increased through the command line, the risk assessment would be as follows:

Rule

Severity

Likelihood

Remediation Cost

Priority

Level

FIO37-J

low

probable

medium

P4

L3

In the case of the database solution being used, the cost would increase to high due to the usage of a disk-based solution.

Rule

Severity

Likelihood

Remediation Cost

Priority

Level

FIO37-J

low

probable

high

P2

L3

Related Vulnerabilities

Search for vulnerabilities resulting from the violation of this rule on the CERT website

References

Wiki Markup
\[\[1[Sun 06|AA. Java References#Sun 06]\] [Garbage Collection Ergonomics|http://java.sun.com/javase/6/docs/technotes/guides/vm/gc-ergonomics.html ], "Default values for the Initial and Maximum heap size"
\[\[2[Sun 06|AA. Java References#Sun 06]\] [Non Standard Options for java: The Java application launcher|http://java.sun.com/javase/6/docs/technotes/tools/windows/java.html ], "Syntax for increasing the heap size"
\[[Sun 03|AA. Java References#Sun 03]\] Chapter 5: Tuning the Java Runtime System, [Tuning the Java Heap|http://docs.sun.com/source/817-2180-10/pt_chap5.html#wp57027] 
\[[API 06|AA. Java References#API 06]\] Class ObjectInputStream and ObjectOutputStream
\[[SDN 08|AA. Java References#SDN 08]\] [Serialization FAQ|http://java.sun.com/javase/technologies/core/basic/serializationFAQ.jsp] 

...