RFR: 8348828: Windows dll loading now resolves symlinks
Alan Bateman
alanb at openjdk.org
Sun Oct 19 09:33:04 UTC 2025
On Sat, 18 Oct 2025 00:06:11 GMT, Benjamin Peterson <duke at openjdk.org> wrote:
> I hope this aids in understanding the issue and review my proposed fix(es).
I think the issue is understood. The original bug report was a bit confusing as it involved replacing the DLLs in the JDK bin directory with sym links. I think we are past that now and the discussion has moved onto sym links with the .dll suffix that are linked to files that don't have the .dll suffix.
We don't have an insight as to why the Windows APIs requires "opt-in" for this. It may help to thwart attempts to evade scanners, maybe it makes it harder for smugglers, or maybe there are other reasons. I've asked our security team for some input on the topic before forming an opinion as to whether we should do anything.
-------------
PR Comment: https://git.openjdk.org/jdk/pull/24694#issuecomment-3419516424
More information about the core-libs-dev
mailing list