[Bug 2032] [IcedTea7] CACAO lacks JVM_FindClassFromCaller introduced by security patch in 2.5.3

[bugzilla-daemon at icedtea.classpath.org]

http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2032

--- Comment #7 from Andrew John Hughes <gnu.andrew at redhat.com> ---
>From the upstream HotSpot code:

"The VM is responsible for the checkPackageAccess relative to the initiating
class loader via the protection_domain."

The protection domain is retrieved from the new caller argument:

if (from_class != NULL && loader_oop != NULL) {
  protection_domain =
instanceKlass::cast(java_lang_Class::as_klassOop(from_class))->protection_domain();
}

and then used to do a checkPackageAccess check:

klassOop klass = SystemDictionary::resolve_or_fail(name, loader,
protection_domain, throwError != 0, CHECK_NULL);

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20141029/26e0e843/attachment.html>