db-derby-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Rick Hillegas (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (DERBY-6654) Require that generated code live in the org.apache.derby.exe package.
Date Mon, 22 Sep 2014 15:19:33 GMT

     [ https://issues.apache.org/jira/browse/DERBY-6654?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Rick Hillegas updated DERBY-6654:
---------------------------------
    Attachment: derby-6654-02-aa-ClassLoadingTest.diff

Attaching derby-6654-02-aa-ClassLoadingTest.diff. This contains the ClassLoadingTest which
fell out of the previous checkin.

> Require that generated code live in the org.apache.derby.exe package.
> ---------------------------------------------------------------------
>
>                 Key: DERBY-6654
>                 URL: https://issues.apache.org/jira/browse/DERBY-6654
>             Project: Derby
>          Issue Type: Bug
>          Components: Services
>    Affects Versions: 10.11.1.1
>            Reporter: Rick Hillegas
>            Assignee: Rick Hillegas
>         Attachments: derby-6654-01-aa-requireCorrectPackage.diff, derby-6654-02-aa-ClassLoadingTest.diff
>
>
> We require that generated code must implement Activation. This helps prevent applications
from using Derby's class loaders to load arbitrary classes. We should also require that generated
code live in the org.apache.derby.exe package. This will prevent applications from loading
 highly privileged code using Derby class loaders.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message