db-derby-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "ASF subversion and git services (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (DERBY-6629) Restrict privileged operation in CreateXMLFile
Date Tue, 24 Jun 2014 07:38:25 GMT

    [ https://issues.apache.org/jira/browse/DERBY-6629?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14041820#comment-14041820
] 

ASF subversion and git services commented on DERBY-6629:
--------------------------------------------------------

Commit 1605021 from [~knutanders] in branch 'code/trunk'
[ https://svn.apache.org/r1605021 ]

DERBY-6629: Restrict privileged operation in CreateXMLFile

Remove the privileged operation in the CreateXMLFile class. Instead, let
the caller do the privileged operation and pass in a Writer object that
CreateXMLFile can write the file to.

Make the tests invoke the plan exporter tool via its main class instead
of calling the internal API.

> Restrict privileged operation in CreateXMLFile
> ----------------------------------------------
>
>                 Key: DERBY-6629
>                 URL: https://issues.apache.org/jira/browse/DERBY-6629
>             Project: Derby
>          Issue Type: Bug
>          Components: Tools
>    Affects Versions: 10.10.2.0
>            Reporter: Knut Anders Hatlen
>            Assignee: Knut Anders Hatlen
>         Attachments: d6629-1a.diff
>
>
> The PlanExporter tool has a public method CreateXMLFile.writeTheXMLFile(). This method
opens a FileOutputStream in a privileged block. We should change this so that unprivileged
code cannot use the method to write files using derbytools.jar's privileges.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message