RFR: 8026404 - Logging in Applet can trigger ACE: access denied ("java.lang.RuntimePermission" "modifyThreadGroup")

Mandy Chung mandy.chung at oracle.com
Tue Oct 15 03:48:01 UTC 2013


On 10/14/2013 11:05 AM, Daniel Fuchs wrote:
> Hi,
>
> Please find below a fix for:
>
>    8026404: Logging in Applet can trigger ACE:
>          access denied ("java.lang.RuntimePermission"
>          "modifyThreadGroup")
>
> In some circumstances the call to JavaAWTAccess.getAppletContext()
> will trigger a call to ecx.threadGroup.getParent() == null
> The trouble is that this call will require a "modifyThreadGroup"
> permission if it happens that ecx.threadGroup.getParent() is
> the root thread group.
>
> The fix for that is simple - the call to
>     ecx.threadGroup.getParent() == null
> needs to be done within a doPrivileged:
>
> <http://cr.openjdk.java.net/~dfuchs/webrev_8026404/webrev.00/>
>

The change looks okay to me.

Mandy




More information about the core-libs-dev mailing list