RFR: 8026404 - Logging in Applet can trigger ACE: access denied ("java.lang.RuntimePermission" "modifyThreadGroup")
Daniel Fuchs
daniel.fuchs at oracle.com
Mon Oct 14 19:19:14 UTC 2013
Adding awt-dev...
> The change looks okay to me but I would suggest sending to awt-dev so that the folks that maintain this area know about it.
>
> On the test then does initializing SunToolkit cause AWT to be initialized? I just wonder if this test will run headless.
>
> -Alan.
Hi,
Please find below a fix for:
8026404: Logging in Applet can trigger ACE:
access denied ("java.lang.RuntimePermission"
"modifyThreadGroup")
In some circumstances the call to JavaAWTAccess.getAppletContext()
will trigger a call to ecx.threadGroup.getParent() == null
The trouble is that this call will require a "modifyThreadGroup"
permission if it happens that ecx.threadGroup.getParent() is
the root thread group.
The fix for that is simple - the call to
ecx.threadGroup.getParent() == null
needs to be done within a doPrivileged:
<http://cr.openjdk.java.net/~dfuchs/webrev_8026404/webrev.00/>
The reg test fails without the fix and passes with it.
best regards,
-- daniel
More information about the core-libs-dev
mailing list