ofbiz-notifications mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Dennis Balkir (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (OFBIZ-9631) [FB] Package org.apache.ofbiz.common.period
Date Fri, 25 Aug 2017 13:11:00 GMT

     [ https://issues.apache.org/jira/browse/OFBIZ-9631?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Dennis Balkir updated OFBIZ-9631:
---------------------------------
    Attachment: OFBIZ-9631_org.apache.ofbiz.common.period_bugfixes.patch

- changed the parameter to final and private, to prevent possible vulnerability through external
code changing


> [FB] Package org.apache.ofbiz.common.period
> -------------------------------------------
>
>                 Key: OFBIZ-9631
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-9631
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: framework
>    Affects Versions: Trunk
>            Reporter: Dennis Balkir
>            Priority: Minor
>         Attachments: OFBIZ-9631_org.apache.ofbiz.common.period_bugfixes.patch
>
>
> - PeriodWorker.java:34, MS_SHOULD_BE_FINAL
> MS: org.apache.ofbiz.common.period.PeriodWorker.module isn't final but should be
> This static field public but not final, and could be changed by malicious code or by
accident from another package. The field could be made final to avoid this vulnerability.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message