RFR: 8026404 - Logging in Applet can trigger ACE: access denied ("java.lang.RuntimePermission" "modifyThreadGroup")
Mandy Chung
mandy.chung at oracle.com
Tue Oct 15 03:48:01 UTC 2013
On 10/14/2013 11:05 AM, Daniel Fuchs wrote:
> Hi,
>
> Please find below a fix for:
>
> 8026404: Logging in Applet can trigger ACE:
> access denied ("java.lang.RuntimePermission"
> "modifyThreadGroup")
>
> In some circumstances the call to JavaAWTAccess.getAppletContext()
> will trigger a call to ecx.threadGroup.getParent() == null
> The trouble is that this call will require a "modifyThreadGroup"
> permission if it happens that ecx.threadGroup.getParent() is
> the root thread group.
>
> The fix for that is simple - the call to
> ecx.threadGroup.getParent() == null
> needs to be done within a doPrivileged:
>
> <http://cr.openjdk.java.net/~dfuchs/webrev_8026404/webrev.00/>
>
The change looks okay to me.
Mandy
More information about the core-libs-dev
mailing list