Dan Xu
dan.xu at oracle.com
Sun Dec 2 00:04:08 PST 2012
Hi Alan,
I just uploaded the new fix at
http://cr.openjdk.java.net/~dxu/7142921/webrev.04/. Please help take a
look. I forgot to add the testcase in my last webrev. And now I updated
CheckPermissions.java with a section to test Files.probeContentType()
at the end of main() method. Another minor change I did is to add
"mimeTypesFile != null" in the if condition in loadMimeTypes() method.
Otherwise, it may throw a NullPointException.
In addition, I am still not very clear about the usage of doPrivileged
block. In my understanding, all code shipped inside JDK is considered
system code and run inside the system domain, which automatically has
full permissions. Why do we still use doPrivileged block to bypass the
security manager?
Thanks,
-Dan
On Sat 01 Dec 2012 08:17:49 AM PST, Alan Bateman wrote:
> On 30/11/2012 16:28, Dan Xu wrote:
>> Thanks for your comments. Here is the updated patch,
>> http://cr.openjdk.java.net/~dxu/7142921/webrev.03/
>> <http://cr.openjdk.java.net/%7Edxu/7142921/webrev.03/>. Please review it.
>>
>> -Dan
> Thanks for the fixing the lazy loading to loadMimeTypes. Minor comment
> is that you don't really need "done".
>
> I don't think L108-111 is needed as Files.readAllLines will fail the
> file can't be found. You will need to do this in a doPrivileged block
> as otherwise it will fail if there is a security manager. This also
> means you don't need to catch SecurityException.
>
> The test update is missing in this webrev, I don't know if that is
> intentional or not. I did a quick check and it looks like we aren't
> testing Files.probeContentType with a security manager and I think it
> would be good to add such a test.
>
> -Alan.
More information about the nio-dev
mailing list