Critical Description
core-io 1.7.22 includes the following:
$ unzip -p core-io-1.7.22.jar META-INF/services/javax.xml.stream.XMLInputFactory
|
com.fasterxml.aalto.stax.InputFactoryImpl
|
but includes a repackaged com.fasterxml.aalto.stax.InputFactoryImpl:
$ unzip -v core-io-1.7.22.jar */InputFactoryImpl.class
|
Archive: core-io-1.7.22.jar
|
Length Method Size Cmpr Date Time CRC-32 Name
|
-------- ------ ------- ---- ---------- ----- -------- ----
|
17502 Defl:N 5558 68% 11-23-2015 19:35 73b10d7b com/couchbase/client/deps/com/fasterxml/aalto/stax/InputFactoryImpl.class
|
-------- ------- --- -------
|
17502 5558 68% 1 file
|
This breaks anyone trying to load a javax.xml.stream.XMLInputFactory using the service loader.