Fix #1737 on 2.7

[tolbertam]

I maintain a library that depends on jackson-databind 2.7.9.1 as we still want to keep JDK 6 support for a little while longer.

As #1737 fixes CVE 2017-15095 it would be great to apply this on 2.7 as well.

[cowtowncoder]

Ok, I can do that.

One thing to note, however, is that Jackson 2.8 and 2.9 should still work on JDK 6 even if they can not be compiled on it. At least that is the intent behind dynamic loading of JDK 7 types.

[tolbertam]

Ok, I can do that.

Thanks! I appreciate it :)

One thing to note, however, is that Jackson 2.8 and 2.9 should still work on JDK 6 even if they can not be compiled on it. At least that is the intent behind dynamic loading of JDK 7 types.

Interesting, I didn't realize that. For some reason I had always thought 2.8 wouldn't work with JDK 6, but if that is the case I should consider upgrading. I'll test it out and give it a try, thanks!

[tolbertam]

I just realized that I misread your comment. jackson 2.8/2.9 does work with java 6 as you say, but jackson-databind does not as it is compiled targeting 1.7. If I try using jackson-databind 2.8.10 with java 6 I get an Unsuported major.minor version 5.10 exception:

[ERROR] An error occurred while instantiating class com.datastax.driver.extras.codecs.json.JacksonJsonCodecTest: com/fasterxml/jackson/databind/ObjectMapper : Unsupported major.minor version 51.0
[ERROR] at org.testng.internal.ClassHelper.createInstance1(ClassHelper.java:398)
[ERROR] at org.testng.internal.ClassHelper.createInstance(ClassHelper.java:299)

I'm ok with sticking to 2.7 for a bit, in near future we're planning on requiring JDK 8 in our library and at that time we'll upgrade to the latest and greatest 👍 .

[cowtowncoder]

Shoot. I thought that it was to be compiled for JDK 6 too... but perhaps JDK 7 and above do not allow that any more. This is unfortunate since then all effort wrt trying to keep compatibility are in vain
(although to be honest it wasn't tons of work).
Although one benefit there, I think, is that it may still help a bit with Android where bytecode is transcode into Dalvik anyway, but ADK is missing some of JDK classes.