harmony-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hudson (JIRA)" <j...@apache.org>
Subject [jira] Commented: (HARMONY-6367) [classlib] Some Methods doesn't have security Permissions check as compared to SUN JDK.
Date Wed, 10 Nov 2010 12:41:13 GMT

    [ https://issues.apache.org/jira/browse/HARMONY-6367?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12930583#action_12930583
] 

Hudson commented on HARMONY-6367:
---------------------------------

Integrated in Harmony-select-1.5-head-linux-x86_64 #156 (See [https://hudson.apache.org/hudson/job/Harmony-select-1.5-head-linux-x86_64/156/])
    Fix for HARMONY-6367 ([classlib] Some Methods doesn't have security Permissions check
as compared to SUN JDK)
Add further check for accepting a datagram connection.


> [classlib] Some Methods doesn't have security Permissions check as compared to SUN JDK.
> ---------------------------------------------------------------------------------------
>
>                 Key: HARMONY-6367
>                 URL: https://issues.apache.org/jira/browse/HARMONY-6367
>             Project: Harmony
>          Issue Type: Bug
>          Components: Classlib
>    Affects Versions: 5.0M11
>         Environment: JDK Security permission checks
>            Reporter: varun srivastava
>            Assignee: Tim Ellison
>            Priority: Critical
>             Fix For: 5.0M12
>
>   Original Estimate: 96h
>  Remaining Estimate: 96h
>
> Following Methods doesn't have security Permissions as compared to SUN JDK.
> -----------------------------------------------------------------------------------------------------------------
> 1) java.net.URL: java.net.URLConnection openConnection(java.net.Proxy) - "checkConnect"
missing in Harmony. Sun perform checkConnect if proxy is present. It checks whether user is
allowed to connect to proxy.
> 2) java.net.ServerSocket: void implAccept(java.net.Socket) : Harmony missing checkAccept
in protected method. Anyone can create a subclass of SerSocket and accept connections.
> 3) java.net.SocketPermission: boolean equals(java.lang.Object)  - Harmony use getHostNameInternal
method instead of calling getByName as done in Sun, to retrieve host name of the machine.
Thats why checkConnect is never called before retrieving hostname.
> 4) java.security.Provider: void load(java.io.InputStream) - Harmony misses checkSecurityAccess("putProviderProperty."
+ name) check
> 5) java.security.ProtectionDomain: java.lang.String toString() - Harmony doesn't have
checkPermission(SecurityConstants.GET_POLICY_PERMISSION)
> check in case Policy. isSet for dynamicPerms.
> -
> Varun Srivastava
> UT Austin

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message