...
Wiki Markup |
---|
In this example, the program needs more memory on the heap than is available by default. In a server-class machine running either VM (client or server) with a parallel garbage collector, the default initial and maximum heap sizes are as follows for J2SE 56.0 \[1[[Sun 06|AA. Java References#Sun 06]\]: |
- initial heap size: larger of 1/64th of the machine's physical memory on the machine or some reasonable minimum
...
In the case of the heap size being increased through the command line, the risk assessment would be as follows:
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
---|---|---|---|---|---|
FIO37-J | low | probable | medium | P4 | L3 |
In the case of the database solution being used, the cost would increase to high due to the usage of a disk-based solution.
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
---|---|---|---|---|---|
FIO37-J | low | probable | high | P2 | L3 |
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website
References
Wiki Markup |
---|
\[\[1[Sun 06|AA. Java References#Sun 06]\] [Garbage Collection Ergonomics|http://java.sun.com/javase/6/docs/technotes/guides/vm/gc-ergonomics.html ], "Default values for the Initial and Maximum heap size" \[\[2[Sun 06|AA. Java References#Sun 06]\] [Non Standard Options for java: The Java application launcher|http://java.sun.com/javase/6/docs/technotes/tools/windows/java.html ], "Syntax for increasing the heap size" \[[Sun 03|AA. Java References#Sun 03]\] Chapter 5: Tuning the Java Runtime System, [Tuning the Java Heap|http://docs.sun.com/source/817-2180-10/pt_chap5.html#wp57027] \[[API 06|AA. Java References#API 06]\] Class ObjectInputStream and ObjectOutputStream \[[SDN 08|AA. Java References#SDN 08]\] [Serialization FAQ|http://java.sun.com/javase/technologies/core/basic/serializationFAQ.jsp] |
...