db-derby-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Myrna van Lunteren (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (DERBY-6629) Restrict privileged operation in CreateXMLFile
Date Tue, 14 Oct 2014 17:12:34 GMT

    [ https://issues.apache.org/jira/browse/DERBY-6629?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14171227#comment-14171227
] 

Myrna van Lunteren commented on DERBY-6629:
-------------------------------------------

The backport had a javadoc build problem:
[javadoc] (path-to-10.10branch)\java\testing\org\apache\derbyTesting\functionTests\tests\lang\XplainStatisticsTest.java:606:
warning - @param argument "args" is not a parameter name.

Also, all test cases failed with IBM's j2ME implementation:
testPlanExporterIllegalFileAccess(org.apache.derbyTesting.functionTests.tests.lang.XplainStatisticsTest)java.lang.NoSuchMethodError:
java/sql/DatabaseMetaData.getURL()Ljava/lang/String;
	at org.apache.derbyTesting.functionTests.tests.lang.XplainStatisticsTest.disableXplainStyle(XplainStatisticsTest.java:555)
	at org.apache.derbyTesting.functionTests.tests.lang.XplainStatisticsTest.testPlanExporterIllegalFileAccess(XplainStatisticsTest.java:855)
	at java.lang.reflect.AccessibleObject.invokeV(AccessibleObject.java:195)
	at org.apache.derbyTesting.junit.BaseTestCase.runBare(BaseTestCase.java:119)
	at org.apache.derbyTesting.junit.BaseJDBCTestCase.runBareOverridable(BaseJDBCTestCase.java:442)
	at org.apache.derbyTesting.junit.BaseJDBCTestCase.runBare(BaseJDBCTestCase.java:459)
	at junit.extensions.TestDecorator.basicRun(TestDecorator.java:24)
	at junit.extensions.TestSetup$1.protect(TestSetup.java:21)
	at junit.extensions.TestSetup.run(TestSetup.java:25)
	at junit.extensions.TestDecorator.basicRun(TestDecorator.java:24)
	at junit.extensions.TestSetup$1.protect(TestSetup.java:21)
	at junit.extensions.TestSetup.run(TestSetup.java:25)
	at org.apache.derbyTesting.junit.BaseTestSetup.run(BaseTestSetup.java:57)
3) ...etc.
see: http://people.apache.org/~myrnavl/derby_test_results/v10_10/windows/testlog/weme6.2/1631607-suites.All_diff.txt

(the CaseExpressionTest failure in the same run is due to the backport attempt for DERBY-6563).

> Restrict privileged operation in CreateXMLFile
> ----------------------------------------------
>
>                 Key: DERBY-6629
>                 URL: https://issues.apache.org/jira/browse/DERBY-6629
>             Project: Derby
>          Issue Type: Bug
>          Components: Tools
>    Affects Versions: 10.10.2.0
>            Reporter: Knut Anders Hatlen
>            Assignee: Myrna van Lunteren
>             Fix For: 10.11.1.1
>
>         Attachments: d6629-1a.diff
>
>
> The PlanExporter tool has a public method CreateXMLFile.writeTheXMLFile(). This method
opens a FileOutputStream in a privileged block. We should change this so that unprivileged
code cannot use the method to write files using derbytools.jar's privileges.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message