[FLINK-6799] PojoSerializer does not check field types when being deserialized

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Won't Fix
• Affects Version/s: 1.1.5, 1.2.1, 1.3.0, 1.4.0
• Component/s: API / Type Serialization System
• Labels: stale-assigned
• Assignee: Unassigned
• Reporter: Till Rohrmann
• Created: 01/Jun/17 13:44
• Updated: 21/Apr/21 07:54
• Resolved: 21/Apr/21 07:54

Description

The PojoSerializer stores internally the fields of a pojo as Field instances. These field instances are serialized via the FieldSerializer. The FieldSerializer simply writes out the name of the field. When being deserialized, the serializer reads the name and then looks up the field using the dynamically loaded class. If the underlying class changes, e.g. type of fields change, then this won't be noticed, because we don't check the field types. In order to catch errors early and to give meaningful error messages, I think we should add type checks for the reloaded fields.