Integrated: 8309727: Assert privileges while reading the jdk.incubator.vector.VECTOR_ACCESS_OOB_CHECK system property

Chris Hegarty chegar at openjdk.org
Fri Jun 9 19:31:10 UTC 2023


On Fri, 9 Jun 2023 13:02:18 GMT, Chris Hegarty <chegar at openjdk.org> wrote:

> A trivial use of the Vector API when run with the security manager and a domain that does not grant permissions fails with java.security.AccessControlException: access denied ("java.util.PropertyPermission" "jdk.incubator.vector.VECTOR_ACCESS_OOB_CHECK" "read").
> 
> The fix it minimal, as consistent with other system property access in the JDK - just access the property while asserting privileged. Note: no explicit permission grant to the vector module is required, as it is in the boot loader.
> 
> This is the only such security manager related issue I see in this code, and I have looked.

This pull request has now been integrated.

Changeset: cee5724d
Author:    Chris Hegarty <chegar at openjdk.org>
URL:       https://git.openjdk.org/jdk/commit/cee5724d09b9ef9bd528fb721b756cb052265e3d
Stats:     10 lines in 3 files changed: 7 ins; 0 del; 3 mod

8309727: Assert privileges while reading the jdk.incubator.vector.VECTOR_ACCESS_OOB_CHECK system property

Reviewed-by: rriggs, uschindler, psandoz

-------------

PR: https://git.openjdk.org/jdk/pull/14392


More information about the core-libs-dev mailing list