RFR: 8026404 - Logging in Applet can trigger ACE: access denied ("java.lang.RuntimePermission" "modifyThreadGroup")

Daniel Fuchs daniel.fuchs at oracle.com
Mon Oct 14 18:05:48 UTC 2013


Hi,

Please find below a fix for:

    8026404: Logging in Applet can trigger ACE:
          access denied ("java.lang.RuntimePermission"
          "modifyThreadGroup")

In some circumstances the call to JavaAWTAccess.getAppletContext()
will trigger a call to ecx.threadGroup.getParent() == null
The trouble is that this call will require a "modifyThreadGroup"
permission if it happens that ecx.threadGroup.getParent() is
the root thread group.

The fix for that is simple - the call to
     ecx.threadGroup.getParent() == null
needs to be done within a doPrivileged:

<http://cr.openjdk.java.net/~dfuchs/webrev_8026404/webrev.00/>

The reg test fails without the fix and passes with it.

best regards,

-- daniel



More information about the core-libs-dev mailing list