RFR: 8337408: Use GetTempPath2 API instead of GetTempPath [v2]
Dhamoder Nalla
dhanalla at openjdk.org
Thu Aug 15 20:28:28 UTC 2024
> Use the GetTempPath2 APIs instead of the GetTempPath APIs in native code across the OpenJDK repository to retrieve the temporary directory path, as GetTempPath2 provides enhanced security. While GetTempPath may still function without errors, using GetTempPath2 reduces the risk of potential exploits for users.
>
>
> The code to dynamically load GetTempPath2 is duplicated due to the following reasons. I would appreciate any suggestions to remove the duplication where possible:
>
> 1. The changes span across four different folders—java.base, jdk.package, jdk.attach, and hotspot—with no shared code between them.
> 2. Some parts of the code use version A, while others use version W (ANSI vs. Unicode).
> 3. Some parts of the code are written in C others in C++.
Dhamoder Nalla has updated the pull request incrementally with one additional commit since the last revision:
fix missing code
-------------
Changes:
- all: https://git.openjdk.org/jdk/pull/20600/files
- new: https://git.openjdk.org/jdk/pull/20600/files/6969e669..32fce98e
Webrevs:
- full: https://webrevs.openjdk.org/?repo=jdk&pr=20600&range=01
- incr: https://webrevs.openjdk.org/?repo=jdk&pr=20600&range=00-01
Stats: 11 lines in 1 file changed: 8 ins; 1 del; 2 mod
Patch: https://git.openjdk.org/jdk/pull/20600.diff
Fetch: git fetch https://git.openjdk.org/jdk.git pull/20600/head:pull/20600
PR: https://git.openjdk.org/jdk/pull/20600
More information about the core-libs-dev
mailing list