RFR: 8309727: Assert privileges while reading the jdk.incubator.vector.VECTOR_ACCESS_OOB_CHECK system property [v2]

Chris Hegarty chegar at openjdk.org
Fri Jun 9 13:18:07 UTC 2023


> A trivial use of the Vector API when run with the security manager and a domain that does not grant permissions fails with java.security.AccessControlException: access denied ("java.util.PropertyPermission" "jdk.incubator.vector.VECTOR_ACCESS_OOB_CHECK" "read").
> 
> The fix it minimal, as consistent with other system property access in the JDK - just access the property while asserting privileged. Note: no explicit permission grant to the vector module is required, as it is in the boot loader.
> 
> This is the only such security manager related issue I see in this code, and I have looked.

Chris Hegarty has updated the pull request incrementally with one additional commit since the last revision:

  add at bug and remove newline

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/14392/files
  - new: https://git.openjdk.org/jdk/pull/14392/files/1e15af5a..4312aec1

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=14392&range=01
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=14392&range=00-01

  Stats: 2 lines in 2 files changed: 1 ins; 1 del; 0 mod
  Patch: https://git.openjdk.org/jdk/pull/14392.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/14392/head:pull/14392

PR: https://git.openjdk.org/jdk/pull/14392


More information about the core-libs-dev mailing list