[PATCH][IcedTea6] Give xalan/xerces access to their own internal packages

Omair Majid omajid at redhat.com
Thu Apr 18 13:49:43 PDT 2013


On 04/18/2013 04:36 PM, Elliott Baron wrote:
> Hi,
> 
> While backporting S6657673 from Java 7, we discovered that there are
> more instances of ObjectFactory in xalan/xerces in Java 6 that need to
> use the system classloader to access their own packages due to new
> package access restrictions imposed by the security fix.
> 
> Okay to push?

This looks sensible to me. It's the same thing that's done in the
S6657673 patch, except all the classes this patch touches are
package-private (so it should be even safer).

Please add this patch to icedtea6-1.11 under patches/ (not
patches/openjdk), and update the ChangeLog.

Thanks,
Omair

-- 
PGP Key: 66484681 (http://pgp.mit.edu/)
Fingerprint = F072 555B 0A17 3957 4E95  0056 F286 F14F 6648 4681



More information about the distro-pkg-dev mailing list