将字节数组正确解码为char数组

Question

In making password handling more secure by eliminating storage in Strings (which end up on the heap). I have the following existing code:

String pw = new String(buffer, 0, len, "UTF-32LE");

I came up with:

Charset charSet = Charset.forName("UTF-32LE");
ByteBuffer byteBuffer = ByteBuffer.wrap(buffer, 0, len);
CharBuffer charBuffer = charSet.decode(byteBuffer);
charArray = new char[charBuffer.length()];
for (int i = 0; i < charBuffer.length(); ++i)
{
    charArray[i] = charBuffer.charAt(i);
}

Note that we support many different languages, so I'm not quite sure how best to thoroughly test this approach.

1. Is this correct? Are there caveats to this approach?
2. Is this the best approach or am I missing something simpler?

Thanks for any feedback or advice.

Answer 1

I am not sure what are you trying to achieve. At first I had thought you want to get rid of data being stored on the heap but then I saw array of chars. In java every array is an object and every object is stored on the heap. Reference variables can land on the stack but they are only handlers not the object itself.