Review Request: 8221530: Caller sensitive methods not handling caller = null when invoked by JNI code with no java frames on stack
Alan Bateman
Alan.Bateman at oracle.com
Thu Mar 28 08:40:54 UTC 2019
On 27/03/2019 23:17, Mandy Chung wrote:
> :
>
> The proposed fix is to perform proper access check. When there is no
> caller frame, it only allows to access to public members of a public type
> in an unconditional exported API package.
>
The approach seems reasonable to me and we should, at some point, try to
align the other @CS methods with this behavior. As Mandy knows, this is
unspecified behavior and we aren't consistent in the JDK on how to
handle "no caller frame" case. Some @CS methods will throw NPE if
invoked directly, others detect the caller is null and throw or treat it
as Object.class.
In the patch, shouldn't slowVerifyAccess check that memberClass is public?
-Alan
More information about the core-libs-dev
mailing list