[Bug 381] Stackoverflow error with security manager, signed jars and -Djava.security.debug set

[bugzilla-daemon at icedtea.classpath.org]

http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=381





------- Comment #4 from mark at klomp.org  2009-08-20 19:41 -------
Found the root cause.
This comes from the following hunk in patches/icedtea-use-system-tzdata.patch:

+           // Some minimal sanity checking
+           if (dir != null) {
+             try {
+               File f = new File(dir, "ZoneInfoMappings");
+               if (!f.exists())
+                 dir = null;
+             } catch (AccessControlException ace) {
+               dir = null;
+             }
+           }

This part isn't inside a PrivilegedAction, instead it just tries to catch the
AccessControlException if any caller doesn't have permission to check the file.
IMHO this is wrong since later on we do actually try to read files in that
directory inside a PrivilegedAction.


-- 
Configure bugmail: http://icedtea.classpath.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.