RFR: 8344003: WB: Add option to skip clinit during class loading for testing
Evgeny Nikitin
enikitin at openjdk.org
Thu Nov 14 07:08:39 UTC 2024
On Tue, 12 Nov 2024 08:18:48 GMT, Evgeny Nikitin <enikitin at openjdk.org> wrote:
> This PR adds a White-Box controlled option to skip `clinit` methods during class loading.
> Such a feature would allow for non-executing testing techniques of random and untrusted jars/classes in CI systems without being afraid of breaking or harming the running system.
>
> The clinit skipping does not affect core libraries (i.e. those under `java`, `jdk` and `sun` packages), and will only be available in debug builds.
The solution is not enough to ensure security due to static fields initialization (which may have its own code). Withdrawing for now.
-------------
PR Comment: https://git.openjdk.org/jdk/pull/22030#issuecomment-2475570538
More information about the hotspot-dev
mailing list