Mailing-List: contact commits-help@harmony.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@harmony.apache.org
Message-ID: <1914321270.1257337172426.JavaMail.jira@brutus>
Date: Wed, 4 Nov 2009 12:19:32 +0000 (UTC)
From: "Tim Ellison (JIRA)" <jira@apache.org>
To: commits@harmony.apache.org
Subject: [jira] Updated: (HARMONY-6367) [classlib] Some Methods doesn't have
 security Permissions check as compared to SUN JDK.
In-Reply-To: <1941924827.1257142859502.JavaMail.jira@brutus>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


     [ https://issues.apache.org/jira/browse/HARMONY-6367?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Tim Ellison updated HARMONY-6367:
---------------------------------

      Component/s:     (was: JDK)
                   Classlib
    Fix Version/s: 5.0M12
          Summary: [classlib] Some Methods doesn't have security Permissions check as compared to SUN JDK.  (was: Some Methods doesn't have security Permissions check as compared to SUN JDK.)

> [classlib] Some Methods doesn't have security Permissions check as compared to SUN JDK.
> ---------------------------------------------------------------------------------------
>
>                 Key: HARMONY-6367
>                 URL: https://issues.apache.org/jira/browse/HARMONY-6367
>             Project: Harmony
>          Issue Type: Bug
>          Components: Classlib
>    Affects Versions: 5.0M11
>         Environment: JDK Security permission checks
>            Reporter: varun srivastava
>            Assignee: Tim Ellison
>            Priority: Critical
>             Fix For: 5.0M12
>
>   Original Estimate: 96h
>  Remaining Estimate: 96h
>
> Following Methods doesn't have security Permissions as compared to SUN JDK.
> -----------------------------------------------------------------------------------------------------------------
> 1) java.net.URL: java.net.URLConnection openConnection(java.net.Proxy) - "checkConnect" missing in Harmony. Sun perform checkConnect if proxy is present. It checks whether user is allowed to connect to proxy.
> 2) java.net.ServerSocket: void implAccept(java.net.Socket) : Harmony missing checkAccept in protected method. Anyone can create a subclass of SerSocket and accept connections.
> 3) java.net.SocketPermission: boolean equals(java.lang.Object)  - Harmony use getHostNameInternal method instead of calling getByName as done in Sun, to retrieve host name of the machine. Thats why checkConnect is never called before retrieving hostname.
> 4) java.security.Provider: void load(java.io.InputStream) - Harmony misses checkSecurityAccess("putProviderProperty." + name) check
> 5) java.security.ProtectionDomain: java.lang.String toString() - Harmony doesn't have checkPermission(SecurityConstants.GET_POLICY_PERMISSION)
> check in case Policy. isSet for dynamicPerms.
> -
> Varun Srivastava
> UT Austin

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.