db-derby-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Knut Anders Hatlen (JIRA)" <j...@apache.org>
Subject [jira] [Created] (DERBY-6629) Restrict privileged operation in CreateXMLFile
Date Fri, 20 Jun 2014 11:43:25 GMT
Knut Anders Hatlen created DERBY-6629:
-----------------------------------------

             Summary: Restrict privileged operation in CreateXMLFile
                 Key: DERBY-6629
                 URL: https://issues.apache.org/jira/browse/DERBY-6629
             Project: Derby
          Issue Type: Bug
          Components: Tools
    Affects Versions: 10.10.2.0
            Reporter: Knut Anders Hatlen
            Assignee: Knut Anders Hatlen


The PlanExporter tool has a public method CreateXMLFile.writeTheXMLFile(). This method opens
a FileOutputStream in a privileged block. We should change this so that unprivileged code
cannot use the method to write files using derbytools.jar's privileges.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message