Please review 6938627: Make temporary directory use property java.io.tmpdir when specified
David Holmes
David.Holmes at oracle.com
Tue Mar 30 16:02:52 PDT 2010
Hi Coleen,
This looks okay.
The changes in ostream.cpp seem incidental to this CR though.
Good catch on the buffer overflow issue, but more generally we need a CR
to eliminate sprintf from the VM sources.
David
Coleen Phillimore - Sun Microsystems said the following on 03/31/10 07:45:
>
> I've revised the /tmp directory code to protect against buffer
> overflows. I've also tested it on linux too. Please rereview this code.
>
> Summary: Get java.io.tmpdir property in os::get_temp_directory() and
> call this instead of harcoding "/tmp". Don't assume trailing
> file_separator either.
>
> local webrev at http://jruntime.east/~coleenp/webrev/6938627
> bug link at http://monaco.sfbay.sun.com/detail.jsf?cr=6938627
>
> Thanks,
> Coleen
>
> On 03/26/10 20:07, David Schlosnagle wrote:
>> Coleen,
>>
>> There seems to be a couple issues on line 469 of src/os/linux/vm/attachListener_linux.cpp:
>> - It seems like there should be a slash in the format string to match the Solaris version.
>> - The call to os::get_temp_directory() appears to be missing the 'y' at the end.
>>
>> src/os/linux/vm/attachListener_linux.cpp:
>> 469 sprintf(fn, "%s.attach_pid%d", os::get_temp_director(),
>> ^ ^^
>> 470 os::current_process_id());
>>
>> src/os/solaris/vm/attachListener_solaris.cpp:
>> 600 sprintf(fn, "%s/.attach_pid%d", os::get_temp_directory(),
>> ^ ^^
>> 601 os::current_process_id());
>>
>> Thanks,
>> Dave
>>
>>
>> On Mar 26, 2010, at 6:11 PM, Coleen Phillimore wrote:
>>
>>
>>> Summary: Get java.io.tmpdir property in os::get_temp_directory() and call this instead of harcoding "/tmp". Don't assume trailing file_separator either.
>>>
>>> open webrev at http://cr.openjdk.java.net/~coleenp/6938627/
>>> bug link at http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6938627
>>>
>>> Thanks,
>>> Coleen
>>>
>>
>>
More information about the hotspot-dev
mailing list