The String Memory Gotcha
String has, however, a package-private "quick" constructor that just takes a char array, offset and length and blats them directly into its private fields with no sanity checks. Most of the time this is benign and useful. Most of the time. →