RFR: 8026404 - Logging in Applet can trigger ACE: access denied ("java.lang.RuntimePermission" "modifyThreadGroup")

Daniel Fuchs daniel.fuchs at oracle.com
Mon Oct 14 19:19:14 UTC 2013


Adding awt-dev...

> The change looks okay to me but I would suggest sending to awt-dev so that the folks that maintain this area know about it.
>
> On the test then does initializing SunToolkit cause AWT to be initialized? I just wonder if this test will run headless.
>
> -Alan.


Hi,

Please find below a fix for:

    8026404: Logging in Applet can trigger ACE:
          access denied ("java.lang.RuntimePermission"
          "modifyThreadGroup")

In some circumstances the call to JavaAWTAccess.getAppletContext()
will trigger a call to ecx.threadGroup.getParent() == null
The trouble is that this call will require a "modifyThreadGroup"
permission if it happens that ecx.threadGroup.getParent() is
the root thread group.

The fix for that is simple - the call to
     ecx.threadGroup.getParent() == null
needs to be done within a doPrivileged:

<http://cr.openjdk.java.net/~dfuchs/webrev_8026404/webrev.00/>

The reg test fails without the fix and passes with it.

best regards,

-- daniel



More information about the core-libs-dev mailing list