hg: jdk8/tl/jdk: 8020854: change RMI javadocs to specify that remote objects are exported to the wildcard address

Bernd Eckenfels bernd-2013 at eckenfels.net
Tue Aug 6 02:41:11 UTC 2013


Hello,

> ! src/share/classes/java/rmi/server/RMISocketFactory.java

I think setting the rmi server name to localhost is a dangerous  
recommendation. It might happen that it resolves to a IPv4 or IPv6 only  
address on a dual socket host. And InetAddress.getLoopbackAddress() might  
pick the preferred family different from that. So it is better to use the  
literal returned by that function. (or remove this from javadoc).

Bernd



More information about the security-dev mailing list