[icedtea-web] RFC: PR1676: Add useLegacyMergeSort to JNLP properties

[Omair Majid]

Hi,

The attached patch is a one-line fix for PR1676 [1]. It adds
java.util.Arrays.useLegacyMergeSort to the list of secure properties
that all applications can read or write to. This property is used for
application compatibility with Java 6.

Any comments or suggestions?

Thanks,
Omair

[1] http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=1676

-- 
PGP Key: 66484681 (http://pgp.mit.edu/)
Fingerprint = F072 555B 0A17 3957 4E95  0056 F286 F14F 6648 4681
-------------- next part --------------
diff --git a/ChangeLog b/ChangeLog
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,9 @@
+2014-02-28  Omair Majid  <omajid at redhat.com>
+
+	PR1676
+	* netx/net/sourceforge/jnlp/SecurityDesc.java: Add permission to
+	read/write useLegacyMergeSort.
+
 2014-02-27  Andrew Azores  <aazores at redhat.com>
 
 	* netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java: treat signed
diff --git a/netx/net/sourceforge/jnlp/SecurityDesc.java b/netx/net/sourceforge/jnlp/SecurityDesc.java
--- a/netx/net/sourceforge/jnlp/SecurityDesc.java
+++ b/netx/net/sourceforge/jnlp/SecurityDesc.java
@@ -88,6 +88,7 @@
     private static Permission sandboxPermissions[] = {
             new SocketPermission("localhost:1024-", "listen"),
             // new SocketPermission("<DownloadHost>", "connect, accept"), // added by code
+            new PropertyPermission("java.util.Arrays.useLegacyMergeSort", "read,write");
             new PropertyPermission("java.version", "read"),
             new PropertyPermission("java.vendor", "read"),
             new PropertyPermission("java.vendor.url", "read"),