[rfc][icedtea-web] fix for RH816592

Jiri Vanek jvanek at redhat.com
Wed May 23 08:45:42 PDT 2012


On 05/23/2012 05:36 PM, Omair Majid wrote:
> On 05/23/2012 10:22 AM, Deepak Bhole wrote:
>> * Jiri Vanek<jvanek at redhat.com>  [2012-05-03 08:21]:
>>> This patch is fixing
>>> https://bugzilla.redhat.com/show_bug.cgi?id=816592  reproduced in
>>> [rfc][icedtea-web] reproducer for RH816592 (http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-May/018357.html)
>>>
>>> This patch have small (one output message) overleap with [rfc]
>>> [icedtea-web] providing little bit more debug outputs for few
>>> methods (http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-April/018332.html)
>>>
>>
>> This patch tries to manually add an entry to the security map. However it should not
>> be needed. Whatever is adding the jar should add an entry to the map --
>> the bug should be fixed there IMO.

Hmmm. I Believe that there is reflection used to inject the jar into classlaoder. So if I will 
overwrite addUrl method  (which is the best place to do this) this can be still walked around. Thats 
why I have chosen this place..

But I admit my originalpatch must be improved for not searching again for already searched resources.
>
> This is an implementation-specific behaviour of the proprietary javaws
> that some programs seem to rely on. We have other bugs caused by the
> same issue too: PR568 [1] and PR839.

Yap. As I already wrote it is brutal:)
>
> Cheers,
> Omair
>
> [1] http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=568
> [2] http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=839




More information about the distro-pkg-dev mailing list