db-derby-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Rick Hillegas (JIRA)" <j...@apache.org>
Subject [jira] [Created] (DERBY-6654) Require that generated code live in the org.apache.derby.exe package.
Date Wed, 09 Jul 2014 17:29:05 GMT
Rick Hillegas created DERBY-6654:
------------------------------------

             Summary: Require that generated code live in the org.apache.derby.exe package.
                 Key: DERBY-6654
                 URL: https://issues.apache.org/jira/browse/DERBY-6654
             Project: Derby
          Issue Type: Bug
          Components: Services
    Affects Versions: 10.11.0.0
            Reporter: Rick Hillegas


We require that generated code must implement Activation. This helps prevent applications
from using Derby's class loaders to load arbitrary classes. We should also require that generated
code live in the org.apache.derby.exe package. This will prevent applications from loading
 highly privileged code using Derby class loaders.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message